| Offset 1, 6 lines modified | Offset 1, 6 lines modified | ||
| 1 | · | 1 | ·3aca51b8c5dd05b3c6cbb9178388eea4·153200·admin·optional·ssg-applications_0.1.74-1_all.deb |
| 2 | ·ac8190c89a75a5ee928afbdbfeafe241·31300·admin·optional·ssg-base_0.1.74-1_all.deb | 2 | ·ac8190c89a75a5ee928afbdbfeafe241·31300·admin·optional·ssg-base_0.1.74-1_all.deb |
| 3 | ·bf5a657f0ce72098540c50391f3b8e50·2809152·admin·optional·ssg-debderived_0.1.74-1_all.deb | ||
| 4 | ·68c007ace7dab33fbce910d638276088·1232460·admin·optional·ssg-debian_0.1.74-1_all.deb | ||
| 5 | · | 3 | ·cf8677bfb6cd2e2a49d3afe3fd498b74·2807756·admin·optional·ssg-debderived_0.1.74-1_all.deb |
| 4 | ·1391b35ba4fc45c9828271f0f888af4a·1232204·admin·optional·ssg-debian_0.1.74-1_all.deb | ||
| 5 | ·f6432e72502ebbbd1243d5496106e1f4·32360900·admin·optional·ssg-nondebian_0.1.74-1_all.deb | ||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····1728·2024-11-02·18:39:34.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····1728·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0···1512 | 3 | -rw-r--r--···0········0········0···151280·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037fe0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037ff0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037ff0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038000:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038000:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038010:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038010:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038020:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038020:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038030:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038030:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00038040:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00038040:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00038050:·6f66·2032·3032·3 | 00038050:·6f66·2032·3032·352d·3132·2d31·3029·0a20··of·2025-12-10).· | ||
| 00038060:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00038060:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00038070:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00038070:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00038080:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00038080:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00038090:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00038090:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000380a0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000380a0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000380b0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000380b0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000380c0:·636f·6e74·656e·745f·6772·6f75·705f·6368··content_group_ch | 000380c0:·636f·6e74·656e·745f·6772·6f75·705f·6368··content_group_ch |
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Upstream·STIG·for·Google·Chromium | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Upstream·STIG·for·Google·Chromium |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/a:google:chromium-browser | 54 | ····*·cpe:/a:google:chromium-browser |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8C_\x8h_\x8r_\x8o_\x8m_\x8i_\x8u_\x8m | 59 | ···1.·_\x8C_\x8h_\x8r_\x8o_\x8m_\x8i_\x8u_\x8m |
| 60 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 61 | Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37 | 61 | Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37 |
| 62 | rules | 62 | rules |
| 63 | Group ·Chromium· Group·contains·37·rules | 63 | Group ·Chromium· Group·contains·37·rules |
| 64 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and | 64 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and |
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038010:·6173·206f·6620·3230·323 | 00038010:·6173·206f·6620·3230·3235·2d31·322d·3130··as·of·2025-12-10 | ||
| 00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis-node | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis-node |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 | 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 |
| 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 | 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 |
| 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 | 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 56 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 57 | Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service | 57 | Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service |
| 58 | Group·contains·3·groups·and·15·rules | 58 | Group·contains·3·groups·and·15·rules |
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037fa0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037fb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037fb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037fc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037fc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037fd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037fd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037fe0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037fe0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037ff0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037ff0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038000:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038000:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038010:·3 | 00038010:·352d·3132·2d31·3029·0a20·2020·2020·2020··5-12-10).······· | ||
| 00038020:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038020:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038030:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038030:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038040:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038040:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038050:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038050:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038060:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038060:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038070:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038070:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038080:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00038080:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 | 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 |
| 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 | 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 |
| 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 | 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 56 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 57 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 58 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037cd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037cd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037ce0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037ce0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cf0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cf0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d00:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d00:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d20:·6173·206f·6620·3230·323 | 00037d20:·6173·206f·6620·3230·3235·2d31·322d·3130··as·of·2025-12-10 | ||
| 00037d30:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d30:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d40:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d40:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d50:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d50:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d60:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d60:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d70:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d70:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d80:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d80:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d90:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d90:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CUSP·-·Common·User·Security·Profile·for·Mozilla·Firefox | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CUSP·-·Common·User·Security·Profile·for·Mozilla·Firefox |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cusp_firefox | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cusp_firefox |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/a:mozilla:firefox | 41 | ····*·cpe:/a:mozilla:firefox |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x | 46 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x |
| 47 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·1·group | 48 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·1·group |
| 49 | and·9·rules | 49 | and·9·rules |
| 50 | Group ·Firefox· Group·contains·9·rules | 50 | Group ·Firefox· Group·contains·9·rules |
| 51 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Firefox·is·an·open-source·web·browser·and·developed·by·Mozilla.·Web | 51 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Firefox·is·an·open-source·web·browser·and·developed·by·Mozilla.·Web |
| Offset 14332, 15 lines modified | Offset 14332, 15 lines modified | ||
| 00037fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038020:·3 | 00038020:·352d·3132·2d31·3029·0a20·2020·2020·2020··5-12-10).······· | ||
| 00038030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038090:·745f·6772·6f75·705f·6669·7265·666f·7822··t_group_firefox" | 00038090:·745f·6772·6f75·705f·6669·7265·666f·7822··t_group_firefox" |
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Mozilla·Firefox·STIG | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Mozilla·Firefox·STIG |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/a:mozilla:firefox | 54 | ····*·cpe:/a:mozilla:firefox |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x | 59 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x |
| 60 | ·········1.·_\x8T_\x8h_\x8e_\x8·_\x8D_\x8o_\x8D_\x8·_\x8R_\x8o_\x8o_\x8t_\x8·_\x8C_\x8e_\x8r_\x8t_\x8i_\x8f_\x8i_\x8c_\x8a_\x8t_\x8e_\x8·_\x8I_\x8s_\x8·_\x8R_\x8e_\x8q_\x8u_\x8i_\x8r_\x8e_\x8d | 60 | ·········1.·_\x8T_\x8h_\x8e_\x8·_\x8D_\x8o_\x8D_\x8·_\x8R_\x8o_\x8o_\x8t_\x8·_\x8C_\x8e_\x8r_\x8t_\x8i_\x8f_\x8i_\x8c_\x8a_\x8t_\x8e_\x8·_\x8I_\x8s_\x8·_\x8R_\x8e_\x8q_\x8u_\x8i_\x8r_\x8e_\x8d |
| 61 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·2·groups | 62 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·2·groups |
| 63 | and·34·rules | 63 | and·34·rules |
| 64 | Group ·Firefox· Group·contains·1·group·and·34·rules | 64 | Group ·Firefox· Group·contains·1·group·and·34·rules |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-12-10">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 1666, 15 lines modified | Offset 1666, 15 lines modified | ||
| 1666 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1666 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1667 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> | 1667 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> |
| 1668 | ··········</xccdf-1.2:check> | 1668 | ··········</xccdf-1.2:check> |
| 1669 | ········</xccdf-1.2:Rule> | 1669 | ········</xccdf-1.2:Rule> |
| 1670 | ······</xccdf-1.2:Group> | 1670 | ······</xccdf-1.2:Group> |
| 1671 | ····</xccdf-1.2:Benchmark> | 1671 | ····</xccdf-1.2:Benchmark> |
| 1672 | ··</ds:component> | 1672 | ··</ds:component> |
| 1673 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2024-11-0 | 1673 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 1674 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1674 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1675 | ······<oval-def:generator> | 1675 | ······<oval-def:generator> |
| 1676 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1676 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1677 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 1677 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 1678 | ········<oval:schema_version>5.11</oval:schema_version> | 1678 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1679 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 1679 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 1680 | ······</oval-def:generator> | 1680 | ······</oval-def:generator> |
| Offset 2530, 376 lines modified | Offset 2530, 376 lines modified | ||
| 2530 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> | 2530 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> |
| 2531 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> | 2531 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> |
| 2532 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> | 2532 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> |
| 2533 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> | 2533 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> |
| 2534 | ······</oval-def:variables> | 2534 | ······</oval-def:variables> |
| 2535 | ····</oval-def:oval_definitions> | 2535 | ····</oval-def:oval_definitions> |
| 2536 | ··</ds:component> | 2536 | ··</ds:component> |
| 2537 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2024-11-0 | 2537 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 2538 | ····<ocil:ocil> | 2538 | ····<ocil:ocil> |
| 2539 | ······<ocil:generator> | 2539 | ······<ocil:generator> |
| 2540 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2540 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2541 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 2541 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 2542 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2542 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2543 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 2543 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 2544 | ······</ocil:generator> | 2544 | ······</ocil:generator> |
| 2545 | ······<ocil:questionnaires> | 2545 | ······<ocil:questionnaires> |
| 2546 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2546 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> |
| 2547 | ··········<ocil:title> | 2547 | ··········<ocil:title>Enable·Saving·the·Browser·History</ocil:title> |
| 2548 | ··········<ocil:actions> | 2548 | ··········<ocil:actions> |
| 2549 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2549 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> |
| 2550 | ··········</ocil:actions> | 2550 | ··········</ocil:actions> |
| 2551 | ········</ocil:questionnaire> | 2551 | ········</ocil:questionnaire> |
| 2552 | ········<ocil:questionnaire·id="ocil:ssg-chromium_d | 2552 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disallow_location_tracking_ocil:questionnaire:1"> |
| 2553 | ··········<ocil:title> | 2553 | ··········<ocil:title>Disable·Location·Tracking</ocil:title> |
| 2554 | ··········<ocil:actions> | 2554 | ··········<ocil:actions> |
| 2555 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2555 | ············<ocil:test_action_ref>ocil:ssg-chromium_disallow_location_tracking_action:testaction:1</ocil:test_action_ref> |
| 2556 | ··········</ocil:actions> | 2556 | ··········</ocil:actions> |
| 2557 | ········</ocil:questionnaire> | 2557 | ········</ocil:questionnaire> |
| 2558 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2558 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> |
| 2559 | ··········<ocil:title> | 2559 | ··········<ocil:title>Enable·Only·Approved·Plugins</ocil:title> |
| 2560 | ··········<ocil:actions> | 2560 | ··········<ocil:actions> |
| 2561 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2561 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> |
| 2562 | ··········</ocil:actions> | 2562 | ··········</ocil:actions> |
| 2563 | ········</ocil:questionnaire> | 2563 | ········</ocil:questionnaire> |
| 2564 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2564 | ········<ocil:questionnaire·id="ocil:ssg-chromium_trusted_home_page_ocil:questionnaire:1"> |
| 2565 | ··········<ocil:title> | 2565 | ··········<ocil:title>Set·the·Default·Home·Page</ocil:title> |
| 2566 | ··········<ocil:actions> | 2566 | ··········<ocil:actions> |
| 2567 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2567 | ············<ocil:test_action_ref>ocil:ssg-chromium_trusted_home_page_action:testaction:1</ocil:test_action_ref> |
| 2568 | ··········</ocil:actions> | 2568 | ··········</ocil:actions> |
| 2569 | ········</ocil:questionnaire> | 2569 | ········</ocil:questionnaire> |
| 2570 | ········<ocil:questionnaire·id="ocil:ssg-chromium_d | 2570 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_name_ocil:questionnaire:1"> |
| 2571 | ··········<ocil:title>D | 2571 | ··········<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> |
| 2572 | ··········<ocil:actions> | 2572 | ··········<ocil:actions> |
| 2573 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2573 | ············<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_name_action:testaction:1</ocil:test_action_ref> |
| 2574 | ··········</ocil:actions> | 2574 | ··········</ocil:actions> |
| 2575 | ········</ocil:questionnaire> | 2575 | ········</ocil:questionnaire> |
| 2576 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2576 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_password_manager_ocil:questionnaire:1"> |
| 2577 | ··········<ocil:title>Disable· | 2577 | ··········<ocil:title>Disable·Chromium·Password·Manager</ocil:title> |
| 2578 | ··········<ocil:actions> | 2578 | ··········<ocil:actions> |
| 2579 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2579 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_password_manager_action:testaction:1</ocil:test_action_ref> |
| 2580 | ··········</ocil:actions> | 2580 | ··········</ocil:actions> |
| 2581 | ········</ocil:questionnaire> | 2581 | ········</ocil:questionnaire> |
| 2582 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2582 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_protocol_schemas_ocil:questionnaire:1"> |
| 2583 | ··········<ocil:title> | 2583 | ··········<ocil:title>Disable·Insecure·And·Obsolete·Protocol·Schemas</ocil:title> |
| 2584 | ··········<ocil:actions> | 2584 | ··········<ocil:actions> |
| 2585 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2585 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_protocol_schemas_action:testaction:1</ocil:test_action_ref> |
| 2586 | ··········</ocil:actions> | 2586 | ··········</ocil:actions> |
| 2587 | ········</ocil:questionnaire> | 2587 | ········</ocil:questionnaire> |
| 2588 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2588 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_network_prediction_ocil:questionnaire:1"> |
| 2589 | ··········<ocil:title>Disable· | 2589 | ··········<ocil:title>Disable·Network·Prediction</ocil:title> |
| 2590 | ··········<ocil:actions> | 2590 | ··········<ocil:actions> |
| 2591 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2591 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_network_prediction_action:testaction:1</ocil:test_action_ref> |
| 2592 | ··········</ocil:actions> | 2592 | ··········</ocil:actions> |
| 2593 | ········</ocil:questionnaire> | 2593 | ········</ocil:questionnaire> |
| 2594 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2594 | ········<ocil:questionnaire·id="ocil:ssg-chromium_block_desktop_notifications_ocil:questionnaire:1"> |
| 2595 | ··········<ocil:title> | 2595 | ··········<ocil:title>Prevent·Desktop·Notifications</ocil:title> |
| 2596 | ··········<ocil:actions> | 2596 | ··········<ocil:actions> |
| 2597 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2597 | ············<ocil:test_action_ref>ocil:ssg-chromium_block_desktop_notifications_action:testaction:1</ocil:test_action_ref> |
| 2598 | ··········</ocil:actions> | 2598 | ··········</ocil:actions> |
| 2599 | ········</ocil:questionnaire> | 2599 | ········</ocil:questionnaire> |
| 2600 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2600 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_thirdparty_cookies_ocil:questionnaire:1"> |
| 2601 | ··········<ocil:title> | 2601 | ··········<ocil:title>Disable·3rd·Party·Cookies</ocil:title> |
| 2602 | ··········<ocil:actions> | 2602 | ··········<ocil:actions> |
| 2603 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2603 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_thirdparty_cookies_action:testaction:1</ocil:test_action_ref> |
| 2604 | ··········</ocil:actions> | 2604 | ··········</ocil:actions> |
| 2605 | ········</ocil:questionnaire> | 2605 | ········</ocil:questionnaire> |
| 2606 | ········<ocil:questionnaire·id="ocil:ssg-chromium_d | 2606 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> |
| 2607 | ··········<ocil:title> | 2607 | ··········<ocil:title>Enable·the·Default·Search·Provider</ocil:title> |
| 2608 | ··········<ocil:actions> | 2608 | ··········<ocil:actions> |
| 2609 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2609 | ············<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_action:testaction:1</ocil:test_action_ref> |
| 2610 | ··········</ocil:actions> | 2610 | ··········</ocil:actions> |
| 2611 | ········</ocil:questionnaire> | 2611 | ········</ocil:questionnaire> |
| 2612 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2612 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_automatic_installation_ocil:questionnaire:1"> |
| 2613 | ··········<ocil:title>Disable· | 2613 | ··········<ocil:title>Disable·Automatic·Search·And·Installation·of·Plugins</ocil:title> |
| 2614 | ··········<ocil:actions> | 2614 | ··········<ocil:actions> |
| Max diff block lines reached; 68923/81734 bytes (84.33%) of diff not shown. | |||
| Offset 3, 367 lines modified | Offset 3, 367 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Enable·Saving·the·Browser·History</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disallow_location_tracking_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Disable·Location·Tracking</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_disallow_location_tracking_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Enable·Only·Approved·Plugins</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_trusted_home_page_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Set·the·Default·Home·Page</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_trusted_home_page_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_name_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>D | 35 | ······<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_name_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_password_manager_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Disable· | 41 | ······<ocil:title>Disable·Chromium·Password·Manager</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_password_manager_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_protocol_schemas_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Disable·Insecure·And·Obsolete·Protocol·Schemas</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_protocol_schemas_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_network_prediction_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Disable· | 53 | ······<ocil:title>Disable·Network·Prediction</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_network_prediction_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_block_desktop_notifications_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Prevent·Desktop·Notifications</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_block_desktop_notifications_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_thirdparty_cookies_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Disable·3rd·Party·Cookies</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_thirdparty_cookies_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Enable·the·Default·Search·Provider</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_automatic_installation_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable· | 77 | ······<ocil:title>Disable·Automatic·Search·And·Installation·of·Plugins</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_automatic_installation_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_encrypted_searching_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Enable· | 83 | ······<ocil:title>Enable·Encrypted·Searching</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_encrypted_searching_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_metrics_reporting_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable· | 89 | ······<ocil:title>Disable·Metrics·Reporting</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_metrics_reporting_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_outdated_plugins_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Disable·Outdated·Plugins</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_outdated_plugins_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_firewall_traversal_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Disable·Chromium's·Ability·to·Traverse·Firewalls</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_firewall_traversal_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_safe_browsing_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Enable· | 107 | ······<ocil:title>Enable·the·Safe·Browsing·Feature</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_ | 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_safe_browsing_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_saved_passwords_ocil:questionnaire:1"> | 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_saved_passwords_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable·Saved·Passwords</ocil:title> | 113 | ······<ocil:title>Disable·Saved·Passwords</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_saved_passwords_action:testaction:1</ocil:test_action_ref> | 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_saved_passwords_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Disable·Metrics·Reporting</ocil:title> | ||
| 120 | ······<ocil:actions> | ||
| 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_metrics_reporting_action:testaction:1</ocil:test_action_ref> | ||
| 122 | ······</ocil:actions> | ||
| 123 | ····</ocil:questionnaire> | ||
| 124 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> | ||
| 125 | ······<ocil:title>Disable· | 119 | ······<ocil:title>Disable·Session·Cookies</ocil:title> |
| 126 | ······<ocil:actions> | ||
| 127 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> | ||
| 128 | ······</ocil:actions> | ||
| 129 | ····</ocil:questionnaire> | ||
| Max diff block lines reached; 60398/72741 bytes (83.03%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-10">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 7 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> |
| Offset 35, 17 lines modified | Offset 35, 17 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2024-11-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="202 | 44 | ······<xccdf-1.2:status·date="2025-12-10">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 50 | in·order·to·support·security·automation.··The·SCAP·content·is | 50 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 51 | is·available·in·the | 51 | is·available·in·the |
| Offset 113, 24 lines modified | Offset 113, 24 lines modified | ||
| 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 119 | ······<cpe-lang:platform-specification> | 119 | ······<cpe-lang:platform-specification> |
| 120 | ········<cpe-lang:platform·id="eks-node"> | ||
| 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 123 | ··········</cpe-lang:logical-test> | ||
| 124 | ········</cpe-lang:platform> | ||
| 125 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> | 120 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 128 | ··········</cpe-lang:logical-test> | 123 | ··········</cpe-lang:logical-test> |
| 129 | ········</cpe-lang:platform> | 124 | ········</cpe-lang:platform> |
| 125 | ········<cpe-lang:platform·id="eks-node"> | ||
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 128 | ··········</cpe-lang:logical-test> | ||
| 129 | ········</cpe-lang:platform> | ||
| 130 | ······</cpe-lang:platform-specification> | 130 | ······</cpe-lang:platform-specification> |
| 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> | 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> |
| 135 | ······<xccdf-1.2:metadata> | 135 | ······<xccdf-1.2:metadata> |
| 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 1490, 15 lines modified | Offset 1490, 15 lines modified | ||
| 1490 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> | 1490 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> |
| 1491 | ············</xccdf-1.2:check> | 1491 | ············</xccdf-1.2:check> |
| 1492 | ··········</xccdf-1.2:Rule> | 1492 | ··········</xccdf-1.2:Rule> |
| 1493 | ········</xccdf-1.2:Group> | 1493 | ········</xccdf-1.2:Group> |
| 1494 | ······</xccdf-1.2:Group> | 1494 | ······</xccdf-1.2:Group> |
| 1495 | ····</xccdf-1.2:Benchmark> | 1495 | ····</xccdf-1.2:Benchmark> |
| 1496 | ··</ds:component> | 1496 | ··</ds:component> |
| 1497 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2024-11-0 | 1497 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 1498 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1498 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1499 | ······<oval-def:generator> | 1499 | ······<oval-def:generator> |
| 1500 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1500 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1501 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 1501 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 1502 | ········<oval:schema_version>5.11</oval:schema_version> | 1502 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1503 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 1503 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 1504 | ······</oval-def:generator> | 1504 | ······</oval-def:generator> |
| Offset 2111, 394 lines modified | Offset 2111, 394 lines modified | ||
| 2111 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> | 2111 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> |
| 2112 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> | 2112 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> |
| 2113 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> | 2113 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> |
| 2114 | ········</oval-def:local_variable> | 2114 | ········</oval-def:local_variable> |
| 2115 | ······</oval-def:variables> | 2115 | ······</oval-def:variables> |
| 2116 | ····</oval-def:oval_definitions> | 2116 | ····</oval-def:oval_definitions> |
| 2117 | ··</ds:component> | 2117 | ··</ds:component> |
| 2118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2024-11-0 | 2118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 2119 | ····<ocil:ocil> | 2119 | ····<ocil:ocil> |
| 2120 | ······<ocil:generator> | 2120 | ······<ocil:generator> |
| 2121 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2121 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2122 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 2122 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 2123 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2123 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2124 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 2124 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 2125 | ······</ocil:generator> | 2125 | ······</ocil:generator> |
| 2126 | ······<ocil:questionnaires> | 2126 | ······<ocil:questionnaires> |
| 2127 | ········<ocil:questionnaire·id="ocil:ssg- | 2127 | ········<ocil:questionnaire·id="ocil:ssg-configure_network_policy_ocil:questionnaire:1"> |
| 2128 | ··········<ocil:title>Ensure· | 2128 | ··········<ocil:title>Ensure·Network·Policy·is·Enabled</ocil:title> |
| 2129 | ··········<ocil:actions> | 2129 | ··········<ocil:actions> |
| 2130 | ············<ocil:test_action_ref>ocil:ssg- | 2130 | ············<ocil:test_action_ref>ocil:ssg-configure_network_policy_action:testaction:1</ocil:test_action_ref> |
| 2131 | ··········</ocil:actions> | 2131 | ··········</ocil:actions> |
| 2132 | ········</ocil:questionnaire> | 2132 | ········</ocil:questionnaire> |
| 2133 | ········<ocil:questionnaire·id="ocil:ssg- | 2133 | ········<ocil:questionnaire·id="ocil:ssg-control_plane_access_ocil:questionnaire:1"> |
| 2134 | ··········<ocil:title> | 2134 | ··········<ocil:title>Restrict·Access·to·the·Control·Plane·Endpoint</ocil:title> |
| 2135 | ··········<ocil:actions> | 2135 | ··········<ocil:actions> |
| 2136 | ············<ocil:test_action_ref>ocil:ssg- | 2136 | ············<ocil:test_action_ref>ocil:ssg-control_plane_access_action:testaction:1</ocil:test_action_ref> |
| 2137 | ··········</ocil:actions> | 2137 | ··········</ocil:actions> |
| 2138 | ········</ocil:questionnaire> | 2138 | ········</ocil:questionnaire> |
| 2139 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_ | 2139 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_iptables_util_chains_ocil:questionnaire:1"> |
| 2140 | ··········<ocil:title>kubelet·-· | 2140 | ··········<ocil:title>kubelet·-·Allow·Automatic·Firewall·Configuration</ocil:title> |
| 2141 | ··········<ocil:actions> | 2141 | ··········<ocil:actions> |
| 2142 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_ | 2142 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_iptables_util_chains_action:testaction:1</ocil:test_action_ref> |
| 2143 | ··········</ocil:actions> | 2143 | ··········</ocil:actions> |
| 2144 | ········</ocil:questionnaire> | 2144 | ········</ocil:questionnaire> |
| 2145 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_ | 2145 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> |
| 2146 | ··········<ocil:title>kubelet·-· | 2146 | ··········<ocil:title>kubelet·-·Enable·Client·Certificate·Rotation</ocil:title> |
| 2147 | ··········<ocil:actions> | 2147 | ··········<ocil:actions> |
| 2148 | ············<ocil:test_action_ref>ocil:ssg-kubelet_ | 2148 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_client_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 2149 | ··········</ocil:actions> | 2149 | ··········</ocil:actions> |
| 2150 | ········</ocil:questionnaire> | 2150 | ········</ocil:questionnaire> |
| 2151 | ········<ocil:questionnaire·id="ocil:ssg- | 2151 | ········<ocil:questionnaire·id="ocil:ssg-secret_encryption_ocil:questionnaire:1"> |
| 2152 | ··········<ocil:title> | 2152 | ··········<ocil:title>Ensure·Kubernetes·Secrets·are·Encrypted</ocil:title> |
| 2153 | ··········<ocil:actions> | 2153 | ··········<ocil:actions> |
| 2154 | ············<ocil:test_action_ref>ocil:ssg- | 2154 | ············<ocil:test_action_ref>ocil:ssg-secret_encryption_action:testaction:1</ocil:test_action_ref> |
| 2155 | ··········</ocil:actions> | 2155 | ··········</ocil:actions> |
| 2156 | ········</ocil:questionnaire> | 2156 | ········</ocil:questionnaire> |
| 2157 | ········<ocil:questionnaire·id="ocil:ssg- | 2157 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_anonymous_auth_ocil:questionnaire:1"> |
| Max diff block lines reached; 86080/97602 bytes (88.19%) of diff not shown. | |||
| Offset 3, 385 lines modified | Offset 3, 385 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policy_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure· | 11 | ······<ocil:title>Ensure·Network·Policy·is·Enabled</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policy_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-control_plane_access_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Restrict·Access·to·the·Control·Plane·Endpoint</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-control_plane_access_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_iptables_util_chains_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>kubelet·-· | 23 | ······<ocil:title>kubelet·-·Allow·Automatic·Firewall·Configuration</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_ | 25 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_iptables_util_chains_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>kubelet·-· | 29 | ······<ocil:title>kubelet·-·Enable·Client·Certificate·Rotation</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-kubelet_ | 31 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_client_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-secret_encryption_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Ensure·Kubernetes·Secrets·are·Encrypted</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-secret_encryption_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_anonymous_auth_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Disable·Anonymous·Authentication·to·the·Kubelet</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-kubelet_anonymous_auth_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policies_namespaces_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·that·application·Namespaces·have·Network·Policies·defined.</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policies_namespaces_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-registry_access_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Minimize·user·access·to·Amazon·ECR</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-registry_access_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-iam_integration_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Manage·Users·with·AWS·IAM</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-iam_integration_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policy_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>kubelet·-·Enable·Server·Certificate·Rotation</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_server_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-image_scanning_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·Image·Vulnerability·Scanning</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-image_scanning_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-a | 82 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_protect_kernel_defaults_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>kubelet·-·Enable·Protect·Kernel·Defaults</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-a | 85 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_protect_kernel_defaults_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_a | 88 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_cert_rotation_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>kubelet·-·Enable·Certificate·Rotation</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-kubelet_a | 91 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_configure_client_ca_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>kubelet·-·Configure·the·Client·CA·Certificate</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-kubelet_configure_client_ca_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_deprecated_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_deprecated_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Verify·Group·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-private_nodes_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Ensure· | 113 | ······<ocil:title>Ensure·Cluster·Private·Nodes</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-private_nodes_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_protect_kernel_defaults_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Verify·Permissions·on·the·Worker·Kubeconfig·File</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-f | 124 | ····<ocil:questionnaire·id="ocil:ssg-fargate_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 125 | ······<ocil:title>Consider·Fargate·for·Untrusted·Workloads</ocil:title> |
| Max diff block lines reached; 73740/86167 bytes (85.58%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-10">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 7 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 24 lines modified | Offset 72, 24 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="eks-node"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> | 79 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="eks-node"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ··</cpe-lang:platform-specification> | 89 | ··</cpe-lang:platform-specification> |
| 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> | 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> |
| 94 | ··<xccdf-1.2:metadata> | 94 | ··<xccdf-1.2:metadata> |
| 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-12-10">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 3479, 15 lines modified | Offset 3479, 15 lines modified | ||
| 3479 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> | 3479 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> |
| 3480 | ············</xccdf-1.2:check> | 3480 | ············</xccdf-1.2:check> |
| 3481 | ··········</xccdf-1.2:Rule> | 3481 | ··········</xccdf-1.2:Rule> |
| 3482 | ········</xccdf-1.2:Group> | 3482 | ········</xccdf-1.2:Group> |
| 3483 | ······</xccdf-1.2:Group> | 3483 | ······</xccdf-1.2:Group> |
| 3484 | ····</xccdf-1.2:Benchmark> | 3484 | ····</xccdf-1.2:Benchmark> |
| 3485 | ··</ds:component> | 3485 | ··</ds:component> |
| 3486 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2024-11-0 | 3486 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 3487 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 3487 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 3488 | ······<oval-def:generator> | 3488 | ······<oval-def:generator> |
| 3489 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 3489 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 3490 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 3490 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 3491 | ········<oval:schema_version>5.11</oval:schema_version> | 3491 | ········<oval:schema_version>5.11</oval:schema_version> |
| 3492 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 3492 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 3493 | ······</oval-def:generator> | 3493 | ······</oval-def:generator> |
| Offset 5189, 216 lines modified | Offset 5189, 216 lines modified | ||
| 5189 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> | 5189 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> |
| 5190 | ············</oval-def:concat> | 5190 | ············</oval-def:concat> |
| 5191 | ··········</oval-def:unique> | 5191 | ··········</oval-def:unique> |
| 5192 | ········</oval-def:local_variable> | 5192 | ········</oval-def:local_variable> |
| 5193 | ······</oval-def:variables> | 5193 | ······</oval-def:variables> |
| 5194 | ····</oval-def:oval_definitions> | 5194 | ····</oval-def:oval_definitions> |
| 5195 | ··</ds:component> | 5195 | ··</ds:component> |
| 5196 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2024-11-0 | 5196 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 5197 | ····<ocil:ocil> | 5197 | ····<ocil:ocil> |
| 5198 | ······<ocil:generator> | 5198 | ······<ocil:generator> |
| 5199 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 5199 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5200 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5200 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 5201 | ········<ocil:schema_version>2.0</ocil:schema_version> | 5201 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 5202 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 5202 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 5203 | ······</ocil:generator> | 5203 | ······</ocil:generator> |
| 5204 | ······<ocil:questionnaires> | 5204 | ······<ocil:questionnaires> |
| 5205 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-a | 5205 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 5206 | ··········<ocil:title>Firefox·au | 5206 | ··········<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 5207 | ··········<ocil:actions> | 5207 | ··········<ocil:actions> |
| 5208 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-a | 5208 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 5209 | ··········</ocil:actions> | 5209 | ··········</ocil:actions> |
| 5210 | ········</ocil:questionnaire> | 5210 | ········</ocil:questionnaire> |
| 5211 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5211 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-enhanced_tracking_ocil:questionnaire:1"> |
| 5212 | ··········<ocil:title>Enable· | 5212 | ··········<ocil:title>Enabled·Firefox·Enhanced·Tracking·Protection</ocil:title> |
| 5213 | ··········<ocil:actions> | 5213 | ··········<ocil:actions> |
| 5214 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5214 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-enhanced_tracking_action:testaction:1</ocil:test_action_ref> |
| 5215 | ··········</ocil:actions> | 5215 | ··········</ocil:actions> |
| 5216 | ········</ocil:questionnaire> | 5216 | ········</ocil:questionnaire> |
| 5217 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5217 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> |
| 5218 | ··········<ocil:title>Disable· | 5218 | ··········<ocil:title>Disable·Firefox·network·prediction</ocil:title> |
| 5219 | ··········<ocil:actions> | 5219 | ··········<ocil:actions> |
| 5220 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5220 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-network_prediction_action:testaction:1</ocil:test_action_ref> |
| 5221 | ··········</ocil:actions> | 5221 | ··········</ocil:actions> |
| 5222 | ········</ocil:questionnaire> | 5222 | ········</ocil:questionnaire> |
| 5223 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5223 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> |
| 5224 | ··········<ocil:title> | 5224 | ··········<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> |
| 5225 | ··········<ocil:actions> | 5225 | ··········<ocil:actions> |
| 5226 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5226 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> |
| 5227 | ··········</ocil:actions> | 5227 | ··········</ocil:actions> |
| 5228 | ········</ocil:questionnaire> | 5228 | ········</ocil:questionnaire> |
| 5229 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5229 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> |
| 5230 | ··········<ocil:title>Disable·Firefox· | 5230 | ··········<ocil:title>Disable·Firefox·Telemetry</ocil:title> |
| 5231 | ··········<ocil:actions> | 5231 | ··········<ocil:actions> |
| 5232 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5232 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 5233 | ··········</ocil:actions> | 5233 | ··········</ocil:actions> |
| 5234 | ········</ocil:questionnaire> | 5234 | ········</ocil:questionnaire> |
| 5235 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5235 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-pop-up_windows_ocil:questionnaire:1"> |
| 5236 | ··········<ocil:title>Enable· | 5236 | ··········<ocil:title>Enable·Firefox·Pop-up·Blocker</ocil:title> |
| 5237 | ··········<ocil:actions> | 5237 | ··········<ocil:actions> |
| 5238 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5238 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-pop-up_windows_action:testaction:1</ocil:test_action_ref> |
| 5239 | ··········</ocil:actions> | 5239 | ··········</ocil:actions> |
| 5240 | ········</ocil:questionnaire> | 5240 | ········</ocil:questionnaire> |
| 5241 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> | 5241 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> |
| 5242 | ··········<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> | 5242 | ··········<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> |
| 5243 | ··········<ocil:actions> | 5243 | ··········<ocil:actions> |
| 5244 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> | 5244 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> |
| 5245 | ··········</ocil:actions> | 5245 | ··········</ocil:actions> |
| 5246 | ········</ocil:questionnaire> | 5246 | ········</ocil:questionnaire> |
| 5247 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-en | 5247 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_recommendation_ocil:questionnaire:1"> |
| 5248 | ··········<ocil:title> | 5248 | ··········<ocil:title>Disabled·Firefox·Extension·Recommendations</ocil:title> |
| 5249 | ··········<ocil:actions> | 5249 | ··········<ocil:actions> |
| 5250 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-en | 5250 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_recommendation_action:testaction:1</ocil:test_action_ref> |
| 5251 | ··········</ocil:actions> | 5251 | ··········</ocil:actions> |
| 5252 | ········</ocil:questionnaire> | 5252 | ········</ocil:questionnaire> |
| 5253 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5253 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_studies_ocil:questionnaire:1"> |
| 5254 | ··········<ocil:title> | 5254 | ··········<ocil:title>Disable·Firefox·Studies</ocil:title> |
| 5255 | ··········<ocil:actions> | 5255 | ··········<ocil:actions> |
| 5256 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5256 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_studies_action:testaction:1</ocil:test_action_ref> |
| 5257 | ··········</ocil:actions> | 5257 | ··········</ocil:actions> |
| 5258 | ········</ocil:questionnaire> | 5258 | ········</ocil:questionnaire> |
| 5259 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5259 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_update_ocil:questionnaire:1"> |
| 5260 | ··········<ocil:title> | 5260 | ··········<ocil:title>Firefox·must·be·configured·to·not·automatically·update·installed·add-ons·and·plugins.</ocil:title> |
| 5261 | ··········<ocil:actions> | 5261 | ··········<ocil:actions> |
| 5262 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5262 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_update_action:testaction:1</ocil:test_action_ref> |
| 5263 | ··········</ocil:actions> | 5263 | ··········</ocil:actions> |
| 5264 | ········</ocil:questionnaire> | 5264 | ········</ocil:questionnaire> |
| 5265 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-cr | 5265 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 5266 | ··········<ocil:title> | 5266 | ··········<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 5267 | ··········<ocil:actions> | 5267 | ··········<ocil:actions> |
| 5268 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-cr | 5268 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 5269 | ··········</ocil:actions> | 5269 | ··········</ocil:actions> |
| 5270 | ········</ocil:questionnaire> | 5270 | ········</ocil:questionnaire> |
| 5271 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5271 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_pocket_ocil:questionnaire:1"> |
| 5272 | ··········<ocil:title>Disable· | 5272 | ··········<ocil:title>Disable·Firefox·Pocket</ocil:title> |
| 5273 | ··········<ocil:actions> | 5273 | ··········<ocil:actions> |
| Max diff block lines reached; 45343/57548 bytes (78.79%) of diff not shown. | |||
| Offset 3, 207 lines modified | Offset 3, 207 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-a | 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Firefox·au | 11 | ······<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-a | 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-enhanced_tracking_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Enable· | 17 | ······<ocil:title>Enabled·Firefox·Enhanced·Tracking·Protection</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-enhanced_tracking_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable· | 23 | ······<ocil:title>Disable·Firefox·network·prediction</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-network_prediction_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Disable·Firefox· | 35 | ······<ocil:title>Disable·Firefox·Telemetry</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-pop-up_windows_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Enable· | 41 | ······<ocil:title>Enable·Firefox·Pop-up·Blocker</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-pop-up_windows_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> | 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> | 47 | ······<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> | 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-en | 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_recommendation_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Disabled·Firefox·Extension·Recommendations</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-en | 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_recommendation_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_studies_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Disable·Firefox·Studies</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_studies_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_update_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Firefox·must·be·configured·to·not·automatically·update·installed·add-ons·and·plugins.</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_update_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-cr | 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-cr | 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_pocket_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable· | 77 | ······<ocil:title>Disable·Firefox·Pocket</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_pocket_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> | 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> | 83 | ······<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> | 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_ | 97 | ········<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Enable·Certificate·Verification</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-i | 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Enable·Shared·System·Certificates</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-i | 115 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-enable_ca_trust_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_changes_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Disable·JavaScript's·Raise·Or·Lower·Windows·Capability</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_changes_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 124 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 125 | ······<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> |
| 126 | ······<ocil:actions> | 126 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 127 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> |
| 128 | ······</ocil:actions> | 128 | ······</ocil:actions> |
| Max diff block lines reached; 37488/50144 bytes (74.76%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-10">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 7 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····273 | 2 | -rw-r--r--···0········0········0·····2732·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··280 | 3 | -rw-r--r--···0········0········0··2804832·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037d50:·323 | 00037d50:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 16004, 147 lines modified | Offset 16004, 147 lines modified | ||
| 0003e830:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003e830:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003e840:·743d·2223·6964·6d31·3735·3422·2074·6162··t="#idm1754"·tab | 0003e840:·743d·2223·6964·6d31·3735·3422·2074·6162··t="#idm1754"·tab | ||
| 0003e850:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003e850:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003e860:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003e860:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003e870:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003e870:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003e880:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003e880:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003e890:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003e890:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003e8a0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003e8b0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003e8c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003e8d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003e8e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003e8f0:·6964·6d31·3735·3422·3e3c·7461·626c·6520··idm1754"><table· | |||
| 0003e900:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003e910:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003e920:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003e930:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003e940:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003e950:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e960:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003e970:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003e980:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003e990:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003e9a0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003e9b0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003e9c0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003e9d0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003e9e0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003e9f0:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 0003ea00:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 0003ea10:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 0003ea20:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 0003ea30:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 0003ea40:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 0003ea50:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 0003ea60:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 0003ea70:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 0003ea80:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 0003ea90:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 0003eaa0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 0003eab0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 0003eac0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 0003ead0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 0003eae0:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 0003eaf0:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 0003eb00:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 0003eb10:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 0003eb20:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 0003eb30:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 0003eb40:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 0003eb50:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 0003eb60:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 0003eb70:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 0003eb80:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 0003eb90:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 0003eba0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 0003ebb0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 0003ebc0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 0003ebd0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ebe0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ebf0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ec00:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ec10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ec20:·743d·2223·6964·6d31·3735·3522·2074·6162··t="#idm1755"·tab | |||
| 0003ec30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ec40:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ec50:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ec60:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ec70:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003e | 0003ec80:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003e | 0003ec90:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003e | 0003eca0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003e | 0003ecb0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003e | 0003ecc0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003e8f0:·643d·2269·646d·3137·3534·223e·3c74·6162··d="idm1754"><tab | |||
| 0003e900:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003e910:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003e920:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003e930:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003e940:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003e950:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e960:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003e970:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e980:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003e990:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003e9a0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003e9b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003e9c0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003e9d0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003e9e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003e9f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 0003ea00:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 0003ea10:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 0003ea20:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 0003ea30:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 0003ea40:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 0003ea50:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 0003ea60:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 0003ea70:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003ea80:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 0003ea90:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 0003eaa0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003eab0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003eac0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003ead0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003eae0:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 0003eaf0:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 0003eb00:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 0003eb10:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 0003eb20:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 0003eb30:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| Max diff block lines reached; 877578/897642 bytes (97.76%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| Max diff block lines reached; 106843/112592 bytes (94.89%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d60:·206f·6620·3230·323 | 00037d60:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16025, 146 lines modified | Offset 16025, 146 lines modified | ||
| 0003e980:·6172·6765·743d·2223·6964·6d31·3735·3422··arget="#idm1754" | 0003e980:·6172·6765·743d·2223·6964·6d31·3735·3422··arget="#idm1754" | ||
| 0003e990:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003e990:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003e9a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003e9a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003e9b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003e9b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003e9c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003e9c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003e9d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003e9d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003e9e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003e9e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003e9f0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003ea00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ea10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ea20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ea30:·6964·3d22·6964·6d31·3735·3422·3e3c·7461··id="idm1754"><ta | |||
| 0003ea40:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ea50:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ea60:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ea70:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ea80:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003ea90:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003eaa0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003eab0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003eac0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ead0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003eae0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003eaf0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003eb00:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003eb10:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003eb20:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003eb30:·3e3c·636f·6465·3e0a·666f·7220·6620·696e··><code>.for·f·in | |||
| 0003eb40:·202f·6574·632f·7375·646f·6572·7320·2f65···/etc/sudoers·/e | |||
| 0003eb50:·7463·2f73·7564·6f65·7273·2e64·2f2a·203b··tc/sudoers.d/*·; | |||
| 0003eb60:·2064·6f0a·2020·6966·205b·2021·202d·6520···do.··if·[·!·-e· | |||
| 0003eb70:·2224·6622·205d·203b·2074·6865·6e0a·2020··"$f"·]·;·then.·· | |||
| 0003eb80:·2020·636f·6e74·696e·7565·0a20·2066·690a····continue.··fi. | |||
| 0003eb90:·2020·6d61·7463·6869·6e67·5f6c·6973·743d····matching_list= | |||
| 0003eba0:·2428·6772·6570·202d·5020·275e·283f·2123··$(grep·-P·'^(?!# | |||
| 0003ebb0:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | |||
| 0003ebc0:·7469·6361·7465·2e2a·2427·2024·6620·7c20··ticate.*$'·$f·|· | |||
| 0003ebd0:·756e·6971·2029·0a20·2069·6620·2120·7465··uniq·).··if·!·te | |||
| 0003ebe0:·7374·202d·7a20·2224·6d61·7463·6869·6e67··st·-z·"$matching | |||
| 0003ebf0:·5f6c·6973·7422·3b20·7468·656e·0a20·2020··_list";·then.··· | |||
| 0003ec00:·2077·6869·6c65·2049·4653·3d20·7265·6164···while·IFS=·read | |||
| 0003ec10:·202d·7220·656e·7472·793b·2064·6f0a·2020···-r·entry;·do.·· | |||
| 0003ec20:·2020·2020·2320·636f·6d6d·656e·7420·6f75······#·comment·ou | |||
| 0003ec30:·7420·2221·6175·7468·656e·7469·6361·7465··t·"!authenticate | |||
| 0003ec40:·2220·6d61·7463·6865·7320·746f·2070·7265··"·matches·to·pre | |||
| 0003ec50:·7365·7276·6520·7573·6572·2064·6174·610a··serve·user·data. | |||
| 0003ec60:·2020·2020·2020·7365·6420·2d69·2022·732f········sed·-i·"s/ | |||
| 0003ec70:·5e24·7b65·6e74·7279·7d24·2f23·2026·616d··^${entry}$/#·&am | |||
| 0003ec80:·703b·2f67·2220·2466·0a20·2020·2064·6f6e··p;/g"·$f.····don | |||
| 0003ec90:·6520·266c·743b·266c·743b·266c·743b·2022··e·<<<·" | |||
| 0003eca0:·246d·6174·6368·696e·675f·6c69·7374·220a··$matching_list". | |||
| 0003ecb0:·0a20·2020·202f·7573·722f·7362·696e·2f76··.····/usr/sbin/v | |||
| 0003ecc0:·6973·7564·6f20·2d63·6620·2466·2026·616d··isudo·-cf·$f·&am | |||
| 0003ecd0:·703b·2667·743b·202f·6465·762f·6e75·6c6c··p;>·/dev/null | |||
| 0003ece0:·207c·7c20·6563·686f·2022·4661·696c·2074···||·echo·"Fail·t | |||
| 0003ecf0:·6f20·7661·6c69·6461·7465·2024·6620·7769··o·validate·$f·wi | |||
| 0003ed00:·7468·2076·6973·7564·6f22·0a20·2066·690a··th·visudo".··fi. | |||
| 0003ed10:·646f·6e65·0a3c·2f63·6f64·653e·3c2f·7072··done.</code></pr | |||
| 0003ed20:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ed30:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ed40:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ed50:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ed60:·6172·6765·743d·2223·6964·6d31·3735·3522··arget="#idm1755" | |||
| 0003ed70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003ed80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003ed90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003eda0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003edb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003edc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003e | 0003edd0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003e | 0003ede0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003ea10:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ea20:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ea30:·6522·2069·643d·2269·646d·3137·3534·223e··e"·id="idm1754"> | |||
| 0003ea40:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ea50:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ea60:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ea70:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ea80:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ea90:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003eaa0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003eab0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003eac0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ead0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003eae0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003eaf0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003eb00:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003eb10:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003eb20:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003eb30:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003eb40:·3a20·4669·6e64·202f·6574·632f·7375·646f··:·Find·/etc/sudo | |||
| 0003eb50:·6572·732e·642f·2066·696c·6573·0a20·2061··ers.d/·files.··a | |||
| 0003eb60:·6e73·6962·6c65·2e62·7569·6c74·696e·2e66··nsible.builtin.f | |||
| 0003eb70:·696e·643a·0a20·2020·2070·6174·6873·3a0a··ind:.····paths:. | |||
| 0003eb80:·2020·2020·2d20·2f65·7463·2f73·7564·6f65······-·/etc/sudoe | |||
| 0003eb90:·7273·2e64·2f0a·2020·7265·6769·7374·6572··rs.d/.··register | |||
| 0003eba0:·3a20·7375·646f·6572·730a·2020·7461·6773··:·sudoers.··tags | |||
| 0003ebb0:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003ebc0:·332d·434d·2d36·2861·290a·2020·2d20·4e49··3-CM-6(a).··-·NI | |||
| 0003ebd0:·5354·2d38·3030·2d35·332d·4941·2d31·310a··ST-800-53-IA-11. | |||
| 0003ebe0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003ebf0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003ec00:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003ec10:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003ec20:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003ec30:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003ec40:·7465·6779·0a20·202d·2073·7564·6f5f·7265··tegy.··-·sudo_re | |||
| 0003ec50:·6d6f·7665·5f6e·6f5f·6175·7468·656e·7469··move_no_authenti | |||
| 0003ec60:·6361·7465·0a0a·2d20·6e61·6d65·3a20·5265··cate..-·name:·Re | |||
| 0003ec70:·6d6f·7665·206c·696e·6573·2063·6f6e·7461··move·lines·conta | |||
| 0003ec80:·696e·696e·6720·2161·7574·6865·6e74·6963··ining·!authentic | |||
| Max diff block lines reached; 1005327/1025253 bytes (98.06%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| Max diff block lines reached; 121201/126955 bytes (95.47%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 14774, 147 lines modified | Offset 14774, 147 lines modified | ||
| 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00039b60:·743d·2223·6964·6d31·3735·3422·2074·6162··t="#idm1754"·tab | 00039b60:·743d·2223·6964·6d31·3735·3422·2074·6162··t="#idm1754"·tab | ||
| 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039c10:·6964·6d31·3735·3422·3e3c·7461·626c·6520··idm1754"><table· | |||
| 00039c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039ca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039cb0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039cc0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00039cf0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00039d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039d10:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 00039d20:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 00039d30:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 00039d40:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 00039d50:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 00039d60:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 00039d70:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 00039d80:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 00039d90:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 00039da0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 00039db0:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 00039dc0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 00039dd0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 00039de0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 00039df0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 00039e00:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 00039e10:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 00039e20:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 00039e30:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 00039e40:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 00039e50:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 00039e60:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 00039e70:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 00039e80:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 00039e90:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 00039ea0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 00039eb0:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 00039ec0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 00039ed0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 00039ee0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 00039ef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039f00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039f10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039f20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039f30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00039f40:·743d·2223·6964·6d31·3735·3522·2074·6162··t="#idm1755"·tab | |||
| 00039f50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039f60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039f70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039f80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039f90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039 | 00039fa0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00039 | 00039fb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 00039 | 00039fc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039fd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039fe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039c10:·643d·2269·646d·3137·3534·223e·3c74·6162··d="idm1754"><tab | |||
| 00039c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039ca0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039cb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039cc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039cf0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 00039d00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00039d10:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 00039d20:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 00039d30:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 00039d40:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 00039d50:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 00039d60:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 00039d70:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 00039d80:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 00039d90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00039da0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 00039dc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00039dd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00039de0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 00039df0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 00039e00:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 00039e10:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 00039e20:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 00039e30:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 00039e40:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 00039e50:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| Max diff block lines reached; 250530/270594 bytes (92.59%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 40 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 90, 14 lines modified | Offset 90, 35 lines modified | ||
| 90 | ···························1.7,·SR·1.8,·SR·1.9 | 90 | ···························1.7,·SR·1.8,·SR·1.9 |
| 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 96 | ···························SRG-OS-000373-GPOS-00158 | 96 | ···························SRG-OS-000373-GPOS-00158 |
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 102 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 103 | ··if·[·!·-e·"$f"·]·;·then | ||
| 104 | ····continue | ||
| 105 | ··fi | ||
| 106 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 107 | ··if·!·test·-z·"$matching_list";·then | ||
| 108 | ····while·IFS=·read·-r·entry;·do | ||
| 109 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 110 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 111 | ····done·<<<·"$matching_list" | ||
| 112 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 113 | visudo" | ||
| 114 | ··fi | ||
| 115 | done | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 102 | -·name:·Find·/etc/sudoers.d/·files | 121 | -·name:·Find·/etc/sudoers.d/·files |
| 103 | ··ansible.builtin.find: | 122 | ··ansible.builtin.find: |
| Offset 128, 35 lines modified | Offset 149, 14 lines modified | ||
| 128 | ··-·NIST-800-53-IA-11 | 149 | ··-·NIST-800-53-IA-11 |
| 129 | ··-·low_complexity | 150 | ··-·low_complexity |
| 130 | ··-·low_disruption | 151 | ··-·low_disruption |
| 131 | ··-·medium_severity | 152 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 133 | ··-·restrict_strategy | 154 | ··-·restrict_strategy |
| 134 | ··-·sudo_remove_no_authenticate | 155 | ··-·sudo_remove_no_authenticate |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 140 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 141 | ··if·[·!·-e·"$f"·]·;·then | ||
| 142 | ····continue | ||
| 143 | ··fi | ||
| 144 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 145 | ··if·!·test·-z·"$matching_list";·then | ||
| 146 | ····while·IFS=·read·-r·entry;·do | ||
| 147 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 148 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 149 | ····done·<<<·"$matching_list" | ||
| 150 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 151 | visudo" | ||
| 152 | ··fi | ||
| 153 | done | ||
| 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 155 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 157 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 158 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 157 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 159 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 158 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 160 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 159 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 161 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 160 | ············Without·re-authentication,·users·may·access·resources·or·perform | 162 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 177, 14 lines modified | Offset 177, 35 lines modified | ||
| 177 | ···························1.7,·SR·1.8,·SR·1.9 | 177 | ···························1.7,·SR·1.8,·SR·1.9 |
| 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 183 | ···························SRG-OS-000373-GPOS-00158 | 183 | ···························SRG-OS-000373-GPOS-00158 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 189 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 190 | ··if·[·!·-e·"$f"·]·;·then | ||
| 191 | ····continue | ||
| 192 | ··fi | ||
| 193 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 194 | ··if·!·test·-z·"$matching_list";·then | ||
| 195 | ····while·IFS=·read·-r·entry;·do | ||
| 196 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 197 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 198 | ····done·<<<·"$matching_list" | ||
| 199 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 200 | visudo" | ||
| 201 | ··fi | ||
| 202 | done | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 189 | -·name:·Find·/etc/sudoers.d/·files | 208 | -·name:·Find·/etc/sudoers.d/·files |
| 190 | ··ansible.builtin.find: | 209 | ··ansible.builtin.find: |
| Offset 215, 35 lines modified | Offset 236, 14 lines modified | ||
| 215 | ··-·NIST-800-53-IA-11 | 236 | ··-·NIST-800-53-IA-11 |
| 216 | ··-·low_complexity | 237 | ··-·low_complexity |
| 217 | ··-·low_disruption | 238 | ··-·low_disruption |
| Max diff block lines reached; 32794/38535 bytes (85.10%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d30:·6173·206f·6620·3230·323 | 00037d30:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16015, 146 lines modified | Offset 16015, 146 lines modified | ||
| 0003e8e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003e8e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003e8f0:·6964·6d31·3735·3422·2074·6162·696e·6465··idm1754"·tabinde | 0003e8f0:·6964·6d31·3735·3422·2074·6162·696e·6465··idm1754"·tabinde | ||
| 0003e900:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003e900:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003e910:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003e910:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003e920:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003e920:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003e930:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003e930:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003e940:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003e940:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003e950:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003e960:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003e970:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003e980:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003e990:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003e9a0:·3735·3422·3e3c·7461·626c·6520·636c·6173··754"><table·clas | |||
| 0003e9b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003e9c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003e9d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003e9e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003e9f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ea00:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ea10:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003ea20:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003ea30:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ea40:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003ea50:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003ea60:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003ea70:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | |||
| 0003ea80:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | |||
| 0003ea90:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| 0003eaa0:·666f·7220·6620·696e·202f·6574·632f·7375··for·f·in·/etc/su | |||
| 0003eab0:·646f·6572·7320·2f65·7463·2f73·7564·6f65··doers·/etc/sudoe | |||
| 0003eac0:·7273·2e64·2f2a·203b·2064·6f0a·2020·6966··rs.d/*·;·do.··if | |||
| 0003ead0:·205b·2021·202d·6520·2224·6622·205d·203b···[·!·-e·"$f"·]·; | |||
| 0003eae0:·2074·6865·6e0a·2020·2020·636f·6e74·696e···then.····contin | |||
| 0003eaf0:·7565·0a20·2066·690a·2020·6d61·7463·6869··ue.··fi.··matchi | |||
| 0003eb00:·6e67·5f6c·6973·743d·2428·6772·6570·202d··ng_list=$(grep·- | |||
| 0003eb10:·5020·275e·283f·2123·292e·2a5b·5c73·5d2b··P·'^(?!#).*[\s]+ | |||
| 0003eb20:·5c21·6175·7468·656e·7469·6361·7465·2e2a··\!authenticate.* | |||
| 0003eb30:·2427·2024·6620·7c20·756e·6971·2029·0a20··$'·$f·|·uniq·).· | |||
| 0003eb40:·2069·6620·2120·7465·7374·202d·7a20·2224···if·!·test·-z·"$ | |||
| 0003eb50:·6d61·7463·6869·6e67·5f6c·6973·7422·3b20··matching_list";· | |||
| 0003eb60:·7468·656e·0a20·2020·2077·6869·6c65·2049··then.····while·I | |||
| 0003eb70:·4653·3d20·7265·6164·202d·7220·656e·7472··FS=·read·-r·entr | |||
| 0003eb80:·793b·2064·6f0a·2020·2020·2020·2320·636f··y;·do.······#·co | |||
| 0003eb90:·6d6d·656e·7420·6f75·7420·2221·6175·7468··mment·out·"!auth | |||
| 0003eba0:·656e·7469·6361·7465·2220·6d61·7463·6865··enticate"·matche | |||
| 0003ebb0:·7320·746f·2070·7265·7365·7276·6520·7573··s·to·preserve·us | |||
| 0003ebc0:·6572·2064·6174·610a·2020·2020·2020·7365··er·data.······se | |||
| 0003ebd0:·6420·2d69·2022·732f·5e24·7b65·6e74·7279··d·-i·"s/^${entry | |||
| 0003ebe0:·7d24·2f23·2026·616d·703b·2f67·2220·2466··}$/#·&/g"·$f | |||
| 0003ebf0:·0a20·2020·2064·6f6e·6520·266c·743b·266c··.····done·<&l | |||
| 0003ec00:·743b·266c·743b·2022·246d·6174·6368·696e··t;<·"$matchin | |||
| 0003ec10:·675f·6c69·7374·220a·0a20·2020·202f·7573··g_list"..····/us | |||
| 0003ec20:·722f·7362·696e·2f76·6973·7564·6f20·2d63··r/sbin/visudo·-c | |||
| 0003ec30:·6620·2466·2026·616d·703b·2667·743b·202f··f·$f·&>·/ | |||
| 0003ec40:·6465·762f·6e75·6c6c·207c·7c20·6563·686f··dev/null·||·echo | |||
| 0003ec50:·2022·4661·696c·2074·6f20·7661·6c69·6461···"Fail·to·valida | |||
| 0003ec60:·7465·2024·6620·7769·7468·2076·6973·7564··te·$f·with·visud | |||
| 0003ec70:·6f22·0a20·2066·690a·646f·6e65·0a3c·2f63··o".··fi.done.</c | |||
| 0003ec80:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ec90:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003eca0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ecb0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ecc0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ecd0:·6964·6d31·3735·3522·2074·6162·696e·6465··idm1755"·tabinde | |||
| 0003ece0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003ecf0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003ed00:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003ed10:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003ed20:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003e | 0003ed30:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003e | 0003ed40:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003e | 0003ed50:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003e | 0003ed60:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003e | 0003ed70:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003e | 0003ed80:·646d·3137·3535·223e·3c74·6162·6c65·2063··dm1755"><table·c | ||
| 0003e | 0003ed90:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003e9c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003e9d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003e9e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003e9f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ea00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ea10:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ea20:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003ea30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ea40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ea50:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003ea60:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003ea70:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 0003ea80:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 0003ea90:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003eaa0:·653e·2d20·6e61·6d65·3a20·4669·6e64·202f··e>-·name:·Find·/ | |||
| 0003eab0:·6574·632f·7375·646f·6572·732e·642f·2066··etc/sudoers.d/·f | |||
| 0003eac0:·696c·6573·0a20·2061·6e73·6962·6c65·2e62··iles.··ansible.b | |||
| 0003ead0:·7569·6c74·696e·2e66·696e·643a·0a20·2020··uiltin.find:.··· | |||
| 0003eae0:·2070·6174·6873·3a0a·2020·2020·2d20·2f65···paths:.····-·/e | |||
| 0003eaf0:·7463·2f73·7564·6f65·7273·2e64·2f0a·2020··tc/sudoers.d/.·· | |||
| 0003eb00:·7265·6769·7374·6572·3a20·7375·646f·6572··register:·sudoer | |||
| 0003eb10:·730a·2020·7461·6773·3a0a·2020·2d20·4e49··s.··tags:.··-·NI | |||
| 0003eb20:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003eb30:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003eb40:·332d·4941·2d31·310a·2020·2d20·6c6f·775f··3-IA-11.··-·low_ | |||
| 0003eb50:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003eb60:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003eb70:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003eb80:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003eb90:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | |||
| 0003eba0:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | |||
| 0003ebb0:·2073·7564·6f5f·7265·6d6f·7665·5f6e·6f5f···sudo_remove_no_ | |||
| 0003ebc0:·6175·7468·656e·7469·6361·7465·0a0a·2d20··authenticate..-· | |||
| 0003ebd0:·6e61·6d65·3a20·5265·6d6f·7665·206c·696e··name:·Remove·lin | |||
| 0003ebe0:·6573·2063·6f6e·7461·696e·696e·6720·2161··es·containing·!a | |||
| Max diff block lines reached; 990878/1010804 bytes (98.03%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| Max diff block lines reached; 119312/125054 bytes (95.41%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16224, 741 lines modified | Offset 16224, 741 lines modified | ||
| 0003f5f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003f5f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003f600:·3d22·2369·646d·3439·3439·2220·7461·6269··="#idm4949"·tabi | 0003f600:·3d22·2369·646d·3439·3439·2220·7461·6269··="#idm4949"·tabi | ||
| 0003f610:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003f610:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003f620:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003f620:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003f630:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003f630:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003f640:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003f640:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | Diff chunk too large, falling back to line-by-line diff (727 lines added, 727 lines removed) | |
| 0003f650:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003f650:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003f660:·223e·5265·6d65·6469·6174·696f·6e20· | 0003f660:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003f670:· | 0003f670:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003f680:· | 0003f680:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003f690:· | 0003f690:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003f6a0:· | 0003f6a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003f6b0:· | 0003f6b0:·646d·3439·3439·223e·3c70·7265·3e3c·636f··dm4949"><pre><co | ||
| 0003f6c0:·6 | 0003f6c0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 0003f6d0:· | 0003f6d0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 0003f6e0:·6 | 0003f6e0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 0003f6f0:·6 | 0003f6f0:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | ||
| 0003f700:· | 0003f700:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | ||
| 0003f710:· | 0003f710:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | ||
| 0003f720:· | 0003f720:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | ||
| 0003f730:· | 0003f730:·6572·656e·7620·5d3b·2074·6865·6e0a·0a23··erenv·];·then..# | ||
| 0003f740:· | 0003f740:·204c·6973·7420·6f66·206c·6f67·2066·696c···List·of·log·fil | ||
| 0003f750:· | 0003f750:·6520·7061·7468·7320·746f·2062·6520·696e··e·paths·to·be·in | ||
| 0003f760:· | 0003f760:·7370·6563·7465·6420·666f·7220·636f·7272··spected·for·corr | ||
| 0003f770:· | 0003f770:·6563·7420·7065·726d·6973·7369·6f6e·730a··ect·permissions. | ||
| 0003f780:· | 0003f780:·2320·2a20·5072·696d·6172·696c·7920·696e··#·*·Primarily·in | ||
| 0003f790:·7 | 0003f790:·7370·6563·7420·6c6f·6720·6669·6c65·2070··spect·log·file·p | ||
| 0003f7a0:· | 0003f7a0:·6174·6873·206c·6973·7465·6420·696e·202f··aths·listed·in·/ | ||
| 0003f7b0:· | 0003f7b0:·6574·632f·7273·7973·6c6f·672e·636f·6e66··etc/rsyslog.conf | ||
| 0003f7c0:· | 0003f7c0:·0a52·5359·534c·4f47·5f45·5443·5f43·4f4e··.RSYSLOG_ETC_CON | ||
| 0003f7d0:· | 0003f7d0:·4649·473d·222f·6574·632f·7273·7973·6c6f··FIG="/etc/rsyslo | ||
| 0003f7e0:· | 0003f7e0:·672e·636f·6e66·220a·2320·2a20·416e·6420··g.conf".#·*·And· | ||
| 0003f7f0:· | 0003f7f0:·616c·736f·2074·6865·206c·6f67·2066·696c··also·the·log·fil | ||
| 0003f800:·6 | 0003f800:·6520·7061·7468·7320·6c69·7374·6564·2061··e·paths·listed·a | ||
| 0003f810:· | 0003f810:·6674·6572·2072·7379·736c·6f67·2773·2024··fter·rsyslog's·$ | ||
| 0003f820:· | 0003f820:·496e·636c·7564·6543·6f6e·6669·6720·6469··IncludeConfig·di | ||
| 0003f830:· | 0003f830:·7265·6374·6976·650a·2320·2020·2873·746f··rective.#···(sto | ||
| 0003f840:·7 | 0003f840:·7265·2074·6865·2072·6573·756c·7420·696e··re·the·result·in | ||
| 0003f850:· | 0003f850:·746f·2061·7272·6179·2066·6f72·2074·6865··to·array·for·the | ||
| 0003f860:· | 0003f860:·2063·6173·6520·7468·6572·6527·7320·7368···case·there's·sh | ||
| 0003f870:·6 | 0003f870:·656c·6c20·676c·6f62·2075·7365·6420·6173··ell·glob·used·as | ||
| 0003f880:· | 0003f880:·2076·616c·7565·206f·6620·496e·636c·7564···value·of·Includ | ||
| 0003f890:· | 0003f890:·6543·6f6e·6669·6729·0a72·6561·6461·7272··eConfig).readarr | ||
| 0003f8a0:· | 0003f8a0:·6179·202d·7420·4f4c·445f·494e·4320·266c··ay·-t·OLD_INC·&l | ||
| 0003f8b0:· | 0003f8b0:·743b·2026·6c74·3b28·6772·6570·202d·6520··t;·<(grep·-e· | ||
| 0003f8c0:·225 | 0003f8c0:·225c·2449·6e63·6c75·6465·436f·6e66·6967··"\$IncludeConfig | ||
| 0003f8d0:· | 0003f8d0:·5b5b·3a73·7061·6365·3a5d·5d5c·2b5b·5e5b··[[:space:]]\+[^[ | ||
| 0003f8e0:·3 | 0003f8e0:·3a73·7061·6365·3a5d·3b5d·5c2b·2220·2f65··:space:];]\+"·/e | ||
| 0003f8f0:· | 0003f8f0:·7463·2f72·7379·736c·6f67·2e63·6f6e·6620··tc/rsyslog.conf· | ||
| 0003f900:· | 0003f900:·7c20·6375·7420·2d64·2027·2027·202d·6620··|·cut·-d·'·'·-f· | ||
| 0003f910:·3 | 0003f910:·3229·0a72·6561·6461·7272·6179·202d·7420··2).readarray·-t· | ||
| 0003f920:· | 0003f920:·5253·5953·4c4f·475f·494e·434c·5544·455f··RSYSLOG_INCLUDE_ | ||
| 0003f930:· | 0003f930:·434f·4e46·4947·2026·6c74·3b20·266c·743b··CONFIG·<·< | ||
| 0003f940:·2 | 0003f940:·2866·6f72·2049·4e43·5041·5448·2069·6e20··(for·INCPATH·in· | ||
| 0003f950:· | 0003f950:·2224·7b4f·4c44·5f49·4e43·5b40·5d7d·223b··"${OLD_INC[@]}"; | ||
| 0003f960:· | 0003f960:·2064·6f20·6576·616c·2070·7269·6e74·6620···do·eval·printf· | ||
| 0003f970:·75 | 0003f970:·2725·735c·5c6e·2720·2224·7b49·4e43·5041··'%s\\n'·"${INCPA | ||
| 0003f980:· | 0003f980:·5448·7d22·3b20·646f·6e65·290a·7265·6164··TH}";·done).read | ||
| 0003f990:· | 0003f990:·6172·7261·7920·2d74·204e·4557·5f49·4e43··array·-t·NEW_INC | ||
| 0003f9a0:· | 0003f9a0:·2026·6c74·3b20·266c·743b·2873·6564·202d···<·<(sed·- | ||
| 0003f9b0:·6 | 0003f9b0:·6e20·272f·5e5c·732a·696e·636c·7564·6528··n·'/^\s*include( | ||
| 0003f9c0:· | 0003f9c0:·2f2c·2f29·2f49·7027·202f·6574·632f·7273··/,/)/Ip'·/etc/rs | ||
| 0003f9d0:· | 0003f9d0:·7973·6c6f·672e·636f·6e66·207c·2073·6564··yslog.conf·|·sed | ||
| 0003f9e0:· | 0003f9e0:·202d·6e20·2773·402e·2a66·696c·655c·732a···-n·'s@.*file\s* | ||
| 0003f9f0:· | 0003f9f0:·3d5c·732a·225c·285b·2f5b·3a61·6c6e·756d··=\s*"\([/[:alnum | ||
| 0003fa00:· | 0003fa00:·3a5d·5b3a·7075·6e63·743a·5d5d·2a5c·2922··:][:punct:]]*\)" | ||
| 0003fa10:· | 0003fa10:·2e2a·405c·3140·4970·2729·0a72·6561·6461··.*@\1@Ip').reada | ||
| 0003fa20:· | 0003fa20:·7272·6179·202d·7420·5253·5953·4c4f·475f··rray·-t·RSYSLOG_ | ||
| 0003fa30:· | 0003fa30:·494e·434c·5544·4520·266c·743b·2026·6c74··INCLUDE·<·< | ||
| 0003fa40:· | 0003fa40:·3b28·666f·7220·494e·4350·4154·4820·696e··;(for·INCPATH·in | ||
| 0003fa50:·202 | 0003fa50:·2022·247b·4e45·575f·494e·435b·405d·7d22···"${NEW_INC[@]}" | ||
| 0003fa60:· | 0003fa60:·3b20·646f·2065·7661·6c20·7072·696e·7466··;·do·eval·printf | ||
| 0003fa70:· | 0003fa70:·2027·2573·5c5c·6e27·2022·247b·494e·4350···'%s\\n'·"${INCP | ||
| 0003fa80:· | 0003fa80:·4154·487d·223b·2064·6f6e·6529·0a0a·2320··ATH}";·done)..#· | ||
| 0003fa90:· | 0003fa90:·4465·636c·6172·6520·616e·2061·7272·6179··Declare·an·array | ||
| 0003faa0:· | 0003faa0:·2074·6f20·686f·6c64·2074·6865·2066·696e···to·hold·the·fin | ||
| 0003fab0:·6 | 0003fab0:·616c·206c·6973·7420·6f66·2064·6966·6665··al·list·of·diffe | ||
| 0003fac0:· | 0003fac0:·7265·6e74·206c·6f67·2066·696c·6520·7061··rent·log·file·pa | ||
| 0003fad0:· | 0003fad0:·7468·730a·6465·636c·6172·6520·2d61·204c··ths.declare·-a·L | ||
| 0003fae0:· | 0003fae0:·4f47·5f46·494c·455f·5041·5448·530a·0a23··OG_FILE_PATHS..# | ||
| 0003faf0:·7 | 0003faf0:·2041·7272·6179·2074·6f20·686f·6c64·2061···Array·to·hold·a | ||
| 0003fb00:·6 | 0003fb00:·6c6c·2072·7379·736c·6f67·2063·6f6e·6669··ll·rsyslog·confi | ||
| 0003fb10:·6 | 0003fb10:·6720·656e·7472·6965·730a·5253·5953·4c4f··g·entries.RSYSLO | ||
| 0003fb20:· | 0003fb20:·475f·434f·4e46·4947·533d·2829·0a52·5359··G_CONFIGS=().RSY | ||
| 0003fb30:· | 0003fb30:·534c·4f47·5f43·4f4e·4649·4753·3d28·2224··SLOG_CONFIGS=("$ | ||
| 0003fb40:· | 0003fb40:·7b52·5359·534c·4f47·5f45·5443·5f43·4f4e··{RSYSLOG_ETC_CON | ||
| 0003fb50:· | 0003fb50:·4649·477d·2220·2224·7b52·5359·534c·4f47··FIG}"·"${RSYSLOG | ||
| 0003fb60:· | 0003fb60:·5f49·4e43·4c55·4445·5f43·4f4e·4649·475b··_INCLUDE_CONFIG[ | ||
| 0003fb70:· | 0003fb70:·405d·7d22·2022·247b·5253·5953·4c4f·475f··@]}"·"${RSYSLOG_ | ||
| 0003fb80:· | 0003fb80:·494e·434c·5544·455b·405d·7d22·290a·0a23··INCLUDE[@]}")..# | ||
| 0003fb90:· | 0003fb90:·2047·6574·2066·756c·6c20·6c69·7374·206f···Get·full·list·o | ||
| 0003fba0:· | 0003fba0:·6620·6669·6c65·7320·746f·2062·6520·6368··f·files·to·be·ch | ||
| 0003fbb0:·6 | 0003fbb0:·6563·6b65·640a·2320·5253·5953·4c4f·475f··ecked.#·RSYSLOG_ | ||
| 0003fbc0:· | 0003fbc0:·434f·4e46·4947·5320·6d61·7920·636f·6e74··CONFIGS·may·cont | ||
| 0003fbd0:· | 0003fbd0:·6169·6e20·676c·6f62·7320·7375·6368·2061··ain·globs·such·a | ||
| 0003fbe0:·73 | 0003fbe0:·730a·2320·2f65·7463·2f72·7379·736c·6f67··s.#·/etc/rsyslog | ||
| 0003fbf0:· | 0003fbf0:·2e64·2f2a·2e63·6f6e·6620·2f65·7463·2f72··.d/*.conf·/etc/r | ||
| 0003fc00:· | 0003fc00:·7379·736c·6f67·2e64·2f2a·2e66·7275·6c65··syslog.d/*.frule | ||
| 0003fc10:· | 0003fc10:·0a23·2053·6f2c·206c·6f6f·7020·6f76·6572··.#·So,·loop·over | ||
| 0003fc20:· | 0003fc20:·2074·6865·2065·6e74·7269·6573·2069·6e20···the·entries·in· | ||
| 0003fc30:· | 0003fc30:·5253·5953·4c4f·475f·434f·4e46·4947·5320··RSYSLOG_CONFIGS· | ||
| 0003fc40:· | 0003fc40:·616e·6420·7573·6520·6669·6e64·2074·6f20··and·use·find·to· | ||
| 0003fc50:· | 0003fc50:·6765·7420·7468·6520·6c69·7374·206f·6620··get·the·list·of· | ||
| 0003fc60:· | 0003fc60:·696e·636c·7564·6564·2066·696c·6573·2e0a··included·files.. | ||
| 0003fc70:· | 0003fc70:·5253·5953·4c4f·475f·434f·4e46·4947·5f46··RSYSLOG_CONFIG_F | ||
| 0003fc80:· | 0003fc80:·494c·4553·3d28·290a·666f·7220·454e·5452··ILES=().for·ENTR | ||
| 0003fc90:· | 0003fc90:·5920·696e·2022·247b·5253·5953·4c4f·475f··Y·in·"${RSYSLOG_ | ||
| 0003fca0:· | 0003fca0:·434f·4e46·4947·535b·405d·7d22·0a64·6f0a··CONFIGS[@]}".do. | ||
| 0003fcb0:· | 0003fcb0:·0923·2049·6620·6469·7265·6374·6f72·792c··.#·If·directory, | ||
| 0003fcc0:· | 0003fcc0:·2072·7379·736c·6f67·2077·696c·6c20·7365···rsyslog·will·se | ||
| Max diff block lines reached; 926184/1028220 bytes (90.08%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·16.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·16.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 259, 14 lines modified | Offset 259, 139 lines modified | ||
| 259 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 259 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 260 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 260 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 261 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 261 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 262 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 262 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 263 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 263 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 264 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 264 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 265 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 265 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 267 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 268 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 269 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 270 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 271 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 272 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 273 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 274 | of·IncludeConfig) | ||
| 275 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 276 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 277 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 278 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 279 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 280 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 281 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 282 | '%s\\n'·"${INCPATH}";·done) | ||
| 283 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 284 | declare·-a·LOG_FILE_PATHS | ||
| 285 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 286 | RSYSLOG_CONFIGS=() | ||
| 287 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 288 | {RSYSLOG_INCLUDE[@]}") | ||
| 289 | #·Get·full·list·of·files·to·be·checked | ||
| 290 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 291 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 292 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 293 | included·files. | ||
| 294 | RSYSLOG_CONFIG_FILES=() | ||
| 295 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 296 | do | ||
| 297 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 298 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 299 | » if·[·-d·"${ENTRY}"·] | ||
| 300 | » then | ||
| 301 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 302 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 303 | » elif·[·-f·"${ENTRY}"·] | ||
| 304 | » then | ||
| 305 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 306 | » else | ||
| 307 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 308 | » fi | ||
| 309 | done | ||
| 310 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 311 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 312 | configuration) | ||
| 313 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 314 | do | ||
| 315 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 316 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 317 | ('$')·characters, | ||
| 318 | » #·*·Ignore·empty·lines, | ||
| 319 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 320 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 321 | not·log·files | ||
| 322 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 323 | path | ||
| 324 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 325 | all·of·the | ||
| 326 | » #·following·are·met: | ||
| 327 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 328 | » #·*·it·is·preceded·by·space | ||
| 329 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 330 | characters | ||
| 331 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 332 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 333 | » then | ||
| 334 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 335 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 336 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 337 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 338 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 339 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 340 | {FILTERED_PATHS}") | ||
| 341 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 342 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 343 | newline),·split | ||
| 344 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 345 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 346 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 347 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 348 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 349 | » » #·Delete·the·temporary·array | ||
| 350 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 351 | » fi | ||
| 352 | done | ||
| 353 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 354 | grep·regex·is·a·bit | ||
| 355 | #·curly: | ||
| 356 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 357 | #·extract·File="logfile"·expression | ||
| 358 | #·match·only·"logfile"·expression | ||
| 359 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 360 | do | ||
| 361 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 362 | "${LOG_FILE}") | ||
| 363 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| Max diff block lines reached; 119319/125908 bytes (94.77%) of diff not shown. | |||
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037d50:·323 | 00037d50:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 16036, 146 lines modified | Offset 16036, 146 lines modified | ||
| 0003ea30:·612d·7461·7267·6574·3d22·2369·646d·3139··a-target="#idm19 | 0003ea30:·612d·7461·7267·6574·3d22·2369·646d·3139··a-target="#idm19 | ||
| 0003ea40:·3738·2220·7461·6269·6e64·6578·3d22·3022··78"·tabindex="0" | 0003ea40:·3738·2220·7461·6269·6e64·6578·3d22·3022··78"·tabindex="0" | ||
| 0003ea50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ea50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ea60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ea60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ea70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ea70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ea80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ea80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ea90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ea90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003eaa0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003eab0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003eac0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ead0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003eae0:·6522·2069·643d·2269·646d·3139·3738·223e··e"·id="idm1978"> | |||
| 0003eaf0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003eb00:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003eb10:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003eb20:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003eb30:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003eb40:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003eb50:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003eb60:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003eb70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003eb80:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003eb90:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003eba0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ebb0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003ebc0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003ebd0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003ebe0:·7072·653e·3c63·6f64·653e·0a66·6f72·2066··pre><code>.for·f | |||
| 0003ebf0:·2069·6e20·2f65·7463·2f73·7564·6f65·7273···in·/etc/sudoers | |||
| 0003ec00:·202f·6574·632f·7375·646f·6572·732e·642f···/etc/sudoers.d/ | |||
| 0003ec10:·2a20·3b20·646f·0a20·2069·6620·5b20·2120··*·;·do.··if·[·!· | |||
| 0003ec20:·2d65·2022·2466·2220·5d20·3b20·7468·656e··-e·"$f"·]·;·then | |||
| 0003ec30:·0a20·2020·2063·6f6e·7469·6e75·650a·2020··.····continue.·· | |||
| 0003ec40:·6669·0a20·206d·6174·6368·696e·675f·6c69··fi.··matching_li | |||
| 0003ec50:·7374·3d24·2867·7265·7020·2d50·2027·5e28··st=$(grep·-P·'^( | |||
| 0003ec60:·3f21·2329·2e2a·5b5c·735d·2b5c·2161·7574··?!#).*[\s]+\!aut | |||
| 0003ec70:·6865·6e74·6963·6174·652e·2a24·2720·2466··henticate.*$'·$f | |||
| 0003ec80:·207c·2075·6e69·7120·290a·2020·6966·2021···|·uniq·).··if·! | |||
| 0003ec90:·2074·6573·7420·2d7a·2022·246d·6174·6368···test·-z·"$match | |||
| 0003eca0:·696e·675f·6c69·7374·223b·2074·6865·6e0a··ing_list";·then. | |||
| 0003ecb0:·2020·2020·7768·696c·6520·4946·533d·2072······while·IFS=·r | |||
| 0003ecc0:·6561·6420·2d72·2065·6e74·7279·3b20·646f··ead·-r·entry;·do | |||
| 0003ecd0:·0a20·2020·2020·2023·2063·6f6d·6d65·6e74··.······#·comment | |||
| 0003ece0:·206f·7574·2022·2161·7574·6865·6e74·6963···out·"!authentic | |||
| 0003ecf0:·6174·6522·206d·6174·6368·6573·2074·6f20··ate"·matches·to· | |||
| 0003ed00:·7072·6573·6572·7665·2075·7365·7220·6461··preserve·user·da | |||
| 0003ed10:·7461·0a20·2020·2020·2073·6564·202d·6920··ta.······sed·-i· | |||
| 0003ed20:·2273·2f5e·247b·656e·7472·797d·242f·2320··"s/^${entry}$/#· | |||
| 0003ed30:·2661·6d70·3b2f·6722·2024·660a·2020·2020··&/g"·$f.···· | |||
| 0003ed40:·646f·6e65·2026·6c74·3b26·6c74·3b26·6c74··done·<<< | |||
| 0003ed50:·3b20·2224·6d61·7463·6869·6e67·5f6c·6973··;·"$matching_lis | |||
| 0003ed60:·7422·0a0a·2020·2020·2f75·7372·2f73·6269··t"..····/usr/sbi | |||
| 0003ed70:·6e2f·7669·7375·646f·202d·6366·2024·6620··n/visudo·-cf·$f· | |||
| 0003ed80:·2661·6d70·3b26·6774·3b20·2f64·6576·2f6e··&>·/dev/n | |||
| 0003ed90:·756c·6c20·7c7c·2065·6368·6f20·2246·6169··ull·||·echo·"Fai | |||
| 0003eda0:·6c20·746f·2076·616c·6964·6174·6520·2466··l·to·validate·$f | |||
| 0003edb0:·2077·6974·6820·7669·7375·646f·220a·2020···with·visudo".·· | |||
| 0003edc0:·6669·0a64·6f6e·650a·3c2f·636f·6465·3e3c··fi.done.</code>< | |||
| 0003edd0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003ede0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003edf0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003ee00:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003ee10:·612d·7461·7267·6574·3d22·2369·646d·3139··a-target="#idm19 | |||
| 0003ee20:·3739·2220·7461·6269·6e64·6578·3d22·3022··79"·tabindex="0" | |||
| 0003ee30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003ee40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003ee50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003ee60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003ee70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003e | 0003ee80:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003e | 0003ee90:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003e | 0003eea0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003ead0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003eae0:·6170·7365·2220·6964·3d22·6964·6d31·3937··apse"·id="idm197 | |||
| 0003eaf0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003eb00:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003eb10:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003eb20:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003eb30:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003eb40:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003eb50:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003eb60:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003eb70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003eb80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003eb90:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003eba0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003ebb0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ebc0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003ebd0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003ebe0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003ebf0:·616d·653a·2046·696e·6420·2f65·7463·2f73··ame:·Find·/etc/s | |||
| 0003ec00:·7564·6f65·7273·2e64·2f20·6669·6c65·730a··udoers.d/·files. | |||
| 0003ec10:·2020·616e·7369·626c·652e·6275·696c·7469····ansible.builti | |||
| 0003ec20:·6e2e·6669·6e64·3a0a·2020·2020·7061·7468··n.find:.····path | |||
| 0003ec30:·733a·0a20·2020·202d·202f·6574·632f·7375··s:.····-·/etc/su | |||
| 0003ec40:·646f·6572·732e·642f·0a20·2072·6567·6973··doers.d/.··regis | |||
| 0003ec50:·7465·723a·2073·7564·6f65·7273·0a20·2074··ter:·sudoers.··t | |||
| 0003ec60:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 0003ec70:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003ec80:·204e·4953·542d·3830·302d·3533·2d49·412d···NIST-800-53-IA- | |||
| 0003ec90:·3131·0a20·202d·206c·6f77·5f63·6f6d·706c··11.··-·low_compl | |||
| 0003eca0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003ecb0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003ecc0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003ecd0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003ece0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | |||
| 0003ecf0:·7472·6174·6567·790a·2020·2d20·7375·646f··trategy.··-·sudo | |||
| 0003ed00:·5f72·656d·6f76·655f·6e6f·5f61·7574·6865··_remove_no_authe | |||
| 0003ed10:·6e74·6963·6174·650a·0a2d·206e·616d·653a··nticate..-·name: | |||
| 0003ed20:·2052·656d·6f76·6520·6c69·6e65·7320·636f···Remove·lines·co | |||
| 0003ed30:·6e74·6169·6e69·6e67·2021·6175·7468·656e··ntaining·!authen | |||
| Max diff block lines reached; 877854/897780 bytes (97.78%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 232, 14 lines modified | Offset 232, 35 lines modified | ||
| 232 | ···························1.7,·SR·1.8,·SR·1.9 | 232 | ···························1.7,·SR·1.8,·SR·1.9 |
| 233 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 233 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 234 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 234 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 235 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 235 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 236 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 236 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 238 | ···························SRG-OS-000373-GPOS-00158 | 238 | ···························SRG-OS-000373-GPOS-00158 |
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 244 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 245 | ··if·[·!·-e·"$f"·]·;·then | ||
| 246 | ····continue | ||
| 247 | ··fi | ||
| 248 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 249 | ··if·!·test·-z·"$matching_list";·then | ||
| 250 | ····while·IFS=·read·-r·entry;·do | ||
| 251 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 252 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 253 | ····done·<<<·"$matching_list" | ||
| 254 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 255 | visudo" | ||
| 256 | ··fi | ||
| 257 | done | ||
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 259 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 260 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 261 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 262 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 244 | -·name:·Find·/etc/sudoers.d/·files | 263 | -·name:·Find·/etc/sudoers.d/·files |
| 245 | ··ansible.builtin.find: | 264 | ··ansible.builtin.find: |
| Offset 270, 35 lines modified | Offset 291, 14 lines modified | ||
| 270 | ··-·NIST-800-53-IA-11 | 291 | ··-·NIST-800-53-IA-11 |
| 271 | ··-·low_complexity | 292 | ··-·low_complexity |
| 272 | ··-·low_disruption | 293 | ··-·low_disruption |
| 273 | ··-·medium_severity | 294 | ··-·medium_severity |
| 274 | ··-·no_reboot_needed | 295 | ··-·no_reboot_needed |
| 275 | ··-·restrict_strategy | 296 | ··-·restrict_strategy |
| 276 | ··-·sudo_remove_no_authenticate | 297 | ··-·sudo_remove_no_authenticate |
| 277 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 278 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 279 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 280 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 281 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 282 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 283 | ··if·[·!·-e·"$f"·]·;·then | ||
| 284 | ····continue | ||
| 285 | ··fi | ||
| 286 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 287 | ··if·!·test·-z·"$matching_list";·then | ||
| 288 | ····while·IFS=·read·-r·entry;·do | ||
| 289 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 290 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 291 | ····done·<<<·"$matching_list" | ||
| 292 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 293 | visudo" | ||
| 294 | ··fi | ||
| 295 | done | ||
| 296 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 297 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 299 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 298 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 300 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 299 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 301 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 300 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 302 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 301 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 303 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 302 | ············Without·re-authentication,·users·may·access·resources·or·perform | 304 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 319, 14 lines modified | Offset 319, 35 lines modified | ||
| 319 | ···························1.7,·SR·1.8,·SR·1.9 | 319 | ···························1.7,·SR·1.8,·SR·1.9 |
| 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 321 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 321 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 322 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 322 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 324 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 324 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 325 | ···························SRG-OS-000373-GPOS-00158 | 325 | ···························SRG-OS-000373-GPOS-00158 |
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 331 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 332 | ··if·[·!·-e·"$f"·]·;·then | ||
| 333 | ····continue | ||
| 334 | ··fi | ||
| 335 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 336 | ··if·!·test·-z·"$matching_list";·then | ||
| 337 | ····while·IFS=·read·-r·entry;·do | ||
| 338 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 339 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 340 | ····done·<<<·"$matching_list" | ||
| 341 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 342 | visudo" | ||
| 343 | ··fi | ||
| 344 | done | ||
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 345 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 346 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 347 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 348 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 349 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 331 | -·name:·Find·/etc/sudoers.d/·files | 350 | -·name:·Find·/etc/sudoers.d/·files |
| 332 | ··ansible.builtin.find: | 351 | ··ansible.builtin.find: |
| Offset 357, 35 lines modified | Offset 378, 14 lines modified | ||
| 357 | ··-·NIST-800-53-IA-11 | 378 | ··-·NIST-800-53-IA-11 |
| 358 | ··-·low_complexity | 379 | ··-·low_complexity |
| 359 | ··-·low_disruption | 380 | ··-·low_disruption |
| Max diff block lines reached; 106842/112591 bytes (94.89%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d60:·206f·6620·3230·323 | 00037d60:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16056, 146 lines modified | Offset 16056, 146 lines modified | ||
| 0003eb70:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003eb70:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003eb80:·646d·3139·3738·2220·7461·6269·6e64·6578··dm1978"·tabindex | 0003eb80:·646d·3139·3738·2220·7461·6269·6e64·6578··dm1978"·tabindex | ||
| 0003eb90:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003eb90:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003eba0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003eba0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003ebb0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003ebb0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003ebc0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003ebc0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003ebd0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003ebd0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ebe0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003ebf0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003ec00:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ec10:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ec20:·6c61·7073·6522·2069·643d·2269·646d·3139··lapse"·id="idm19 | |||
| 0003ec30:·3738·223e·3c74·6162·6c65·2063·6c61·7373··78"><table·class | |||
| 0003ec40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ec50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ec60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ec70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ec80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ec90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003eca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ecb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003ecc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ecd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003ece0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003ecf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003ed00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 0003ed10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 0003ed20:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a66··le><pre><code>.f | |||
| 0003ed30:·6f72·2066·2069·6e20·2f65·7463·2f73·7564··or·f·in·/etc/sud | |||
| 0003ed40:·6f65·7273·202f·6574·632f·7375·646f·6572··oers·/etc/sudoer | |||
| 0003ed50:·732e·642f·2a20·3b20·646f·0a20·2069·6620··s.d/*·;·do.··if· | |||
| 0003ed60:·5b20·2120·2d65·2022·2466·2220·5d20·3b20··[·!·-e·"$f"·]·;· | |||
| 0003ed70:·7468·656e·0a20·2020·2063·6f6e·7469·6e75··then.····continu | |||
| 0003ed80:·650a·2020·6669·0a20·206d·6174·6368·696e··e.··fi.··matchin | |||
| 0003ed90:·675f·6c69·7374·3d24·2867·7265·7020·2d50··g_list=$(grep·-P | |||
| 0003eda0:·2027·5e28·3f21·2329·2e2a·5b5c·735d·2b5c···'^(?!#).*[\s]+\ | |||
| 0003edb0:·2161·7574·6865·6e74·6963·6174·652e·2a24··!authenticate.*$ | |||
| 0003edc0:·2720·2466·207c·2075·6e69·7120·290a·2020··'·$f·|·uniq·).·· | |||
| 0003edd0:·6966·2021·2074·6573·7420·2d7a·2022·246d··if·!·test·-z·"$m | |||
| 0003ede0:·6174·6368·696e·675f·6c69·7374·223b·2074··atching_list";·t | |||
| 0003edf0:·6865·6e0a·2020·2020·7768·696c·6520·4946··hen.····while·IF | |||
| 0003ee00:·533d·2072·6561·6420·2d72·2065·6e74·7279··S=·read·-r·entry | |||
| 0003ee10:·3b20·646f·0a20·2020·2020·2023·2063·6f6d··;·do.······#·com | |||
| 0003ee20:·6d65·6e74·206f·7574·2022·2161·7574·6865··ment·out·"!authe | |||
| 0003ee30:·6e74·6963·6174·6522·206d·6174·6368·6573··nticate"·matches | |||
| 0003ee40:·2074·6f20·7072·6573·6572·7665·2075·7365···to·preserve·use | |||
| 0003ee50:·7220·6461·7461·0a20·2020·2020·2073·6564··r·data.······sed | |||
| 0003ee60:·202d·6920·2273·2f5e·247b·656e·7472·797d···-i·"s/^${entry} | |||
| 0003ee70:·242f·2320·2661·6d70·3b2f·6722·2024·660a··$/#·&/g"·$f. | |||
| 0003ee80:·2020·2020·646f·6e65·2026·6c74·3b26·6c74······done·<< | |||
| 0003ee90:·3b26·6c74·3b20·2224·6d61·7463·6869·6e67··;<·"$matching | |||
| 0003eea0:·5f6c·6973·7422·0a0a·2020·2020·2f75·7372··_list"..····/usr | |||
| 0003eeb0:·2f73·6269·6e2f·7669·7375·646f·202d·6366··/sbin/visudo·-cf | |||
| 0003eec0:·2024·6620·2661·6d70·3b26·6774·3b20·2f64···$f·&>·/d | |||
| 0003eed0:·6576·2f6e·756c·6c20·7c7c·2065·6368·6f20··ev/null·||·echo· | |||
| 0003eee0:·2246·6169·6c20·746f·2076·616c·6964·6174··"Fail·to·validat | |||
| 0003eef0:·6520·2466·2077·6974·6820·7669·7375·646f··e·$f·with·visudo | |||
| 0003ef00:·220a·2020·6669·0a64·6f6e·650a·3c2f·636f··".··fi.done.</co | |||
| 0003ef10:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003ef20:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ef30:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003ef40:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003ef50:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003ef60:·646d·3139·3739·2220·7461·6269·6e64·6578··dm1979"·tabindex | |||
| 0003ef70:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003ef80:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003ef90:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003efa0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003efb0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003e | 0003efc0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003e | 0003efd0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003e | 0003efe0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003e | 0003eff0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003ec20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ec30:·6d31·3937·3822·3e3c·7461·626c·6520·636c··m1978"><table·cl | |||
| 0003ec40:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ec50:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ec60:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ec70:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ec80:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ec90:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003eca0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ecb0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ecc0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ecd0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ece0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ecf0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003ed00:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003ed10:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003ed20:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ed30:·3e2d·206e·616d·653a·2046·696e·6420·2f65··>-·name:·Find·/e | |||
| 0003ed40:·7463·2f73·7564·6f65·7273·2e64·2f20·6669··tc/sudoers.d/·fi | |||
| 0003ed50:·6c65·730a·2020·616e·7369·626c·652e·6275··les.··ansible.bu | |||
| 0003ed60:·696c·7469·6e2e·6669·6e64·3a0a·2020·2020··iltin.find:.···· | |||
| 0003ed70:·7061·7468·733a·0a20·2020·202d·202f·6574··paths:.····-·/et | |||
| 0003ed80:·632f·7375·646f·6572·732e·642f·0a20·2072··c/sudoers.d/.··r | |||
| 0003ed90:·6567·6973·7465·723a·2073·7564·6f65·7273··egister:·sudoers | |||
| 0003eda0:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 0003edb0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003edc0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003edd0:·2d49·412d·3131·0a20·202d·206c·6f77·5f63··-IA-11.··-·low_c | |||
| 0003ede0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003edf0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003ee00:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003ee10:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003ee20:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | |||
| 0003ee30:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | |||
| 0003ee40:·7375·646f·5f72·656d·6f76·655f·6e6f·5f61··sudo_remove_no_a | |||
| 0003ee50:·7574·6865·6e74·6963·6174·650a·0a2d·206e··uthenticate..-·n | |||
| 0003ee60:·616d·653a·2052·656d·6f76·6520·6c69·6e65··ame:·Remove·line | |||
| 0003ee70:·7320·636f·6e74·6169·6e69·6e67·2021·6175··s·containing·!au | |||
| Max diff block lines reached; 1004982/1024908 bytes (98.06%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 236, 14 lines modified | Offset 236, 35 lines modified | ||
| 236 | ···························1.7,·SR·1.8,·SR·1.9 | 236 | ···························1.7,·SR·1.8,·SR·1.9 |
| 237 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 237 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 238 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 238 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 239 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 239 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 240 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 240 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 242 | ···························SRG-OS-000373-GPOS-00158 | 242 | ···························SRG-OS-000373-GPOS-00158 |
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 248 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 249 | ··if·[·!·-e·"$f"·]·;·then | ||
| 250 | ····continue | ||
| 251 | ··fi | ||
| 252 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 253 | ··if·!·test·-z·"$matching_list";·then | ||
| 254 | ····while·IFS=·read·-r·entry;·do | ||
| 255 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 256 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 257 | ····done·<<<·"$matching_list" | ||
| 258 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 259 | visudo" | ||
| 260 | ··fi | ||
| 261 | done | ||
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 263 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 264 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 265 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 266 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 248 | -·name:·Find·/etc/sudoers.d/·files | 267 | -·name:·Find·/etc/sudoers.d/·files |
| 249 | ··ansible.builtin.find: | 268 | ··ansible.builtin.find: |
| Offset 274, 35 lines modified | Offset 295, 14 lines modified | ||
| 274 | ··-·NIST-800-53-IA-11 | 295 | ··-·NIST-800-53-IA-11 |
| 275 | ··-·low_complexity | 296 | ··-·low_complexity |
| 276 | ··-·low_disruption | 297 | ··-·low_disruption |
| 277 | ··-·medium_severity | 298 | ··-·medium_severity |
| 278 | ··-·no_reboot_needed | 299 | ··-·no_reboot_needed |
| 279 | ··-·restrict_strategy | 300 | ··-·restrict_strategy |
| 280 | ··-·sudo_remove_no_authenticate | 301 | ··-·sudo_remove_no_authenticate |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 286 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 287 | ··if·[·!·-e·"$f"·]·;·then | ||
| 288 | ····continue | ||
| 289 | ··fi | ||
| 290 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 291 | ··if·!·test·-z·"$matching_list";·then | ||
| 292 | ····while·IFS=·read·-r·entry;·do | ||
| 293 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 294 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 295 | ····done·<<<·"$matching_list" | ||
| 296 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 297 | visudo" | ||
| 298 | ··fi | ||
| 299 | done | ||
| 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 301 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 303 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 302 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 304 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 303 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 305 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 304 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 306 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 305 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 307 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 306 | ············Without·re-authentication,·users·may·access·resources·or·perform | 308 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 323, 14 lines modified | Offset 323, 35 lines modified | ||
| 323 | ···························1.7,·SR·1.8,·SR·1.9 | 323 | ···························1.7,·SR·1.8,·SR·1.9 |
| 324 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 324 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 325 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 325 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 326 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 326 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 328 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 328 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 329 | ···························SRG-OS-000373-GPOS-00158 | 329 | ···························SRG-OS-000373-GPOS-00158 |
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 335 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 336 | ··if·[·!·-e·"$f"·]·;·then | ||
| 337 | ····continue | ||
| 338 | ··fi | ||
| 339 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 340 | ··if·!·test·-z·"$matching_list";·then | ||
| 341 | ····while·IFS=·read·-r·entry;·do | ||
| 342 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 343 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 344 | ····done·<<<·"$matching_list" | ||
| 345 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 346 | visudo" | ||
| 347 | ··fi | ||
| 348 | done | ||
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 350 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 351 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 352 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 353 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 335 | -·name:·Find·/etc/sudoers.d/·files | 354 | -·name:·Find·/etc/sudoers.d/·files |
| 336 | ··ansible.builtin.find: | 355 | ··ansible.builtin.find: |
| Offset 361, 35 lines modified | Offset 382, 14 lines modified | ||
| 361 | ··-·NIST-800-53-IA-11 | 382 | ··-·NIST-800-53-IA-11 |
| 362 | ··-·low_complexity | 383 | ··-·low_complexity |
| 363 | ··-·low_disruption | 384 | ··-·low_disruption |
| Max diff block lines reached; 121200/126954 bytes (95.47%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 14774, 147 lines modified | Offset 14774, 147 lines modified | ||
| 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00039b60:·743d·2223·6964·6d31·3937·3822·2074·6162··t="#idm1978"·tab | 00039b60:·743d·2223·6964·6d31·3937·3822·2074·6162··t="#idm1978"·tab | ||
| 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039c10:·6964·6d31·3937·3822·3e3c·7461·626c·6520··idm1978"><table· | |||
| 00039c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039ca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039cb0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039cc0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00039cf0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00039d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039d10:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 00039d20:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 00039d30:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 00039d40:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 00039d50:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 00039d60:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 00039d70:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 00039d80:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 00039d90:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 00039da0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 00039db0:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 00039dc0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 00039dd0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 00039de0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 00039df0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 00039e00:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 00039e10:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 00039e20:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 00039e30:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 00039e40:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 00039e50:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 00039e60:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 00039e70:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 00039e80:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 00039e90:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 00039ea0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 00039eb0:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 00039ec0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 00039ed0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 00039ee0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 00039ef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039f00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039f10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039f20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039f30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00039f40:·743d·2223·6964·6d31·3937·3922·2074·6162··t="#idm1979"·tab | |||
| 00039f50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039f60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039f70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039f80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039f90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039 | 00039fa0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00039 | 00039fb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 00039 | 00039fc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039fd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039fe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039c10:·643d·2269·646d·3139·3738·223e·3c74·6162··d="idm1978"><tab | |||
| 00039c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039ca0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039cb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039cc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039cf0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 00039d00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00039d10:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 00039d20:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 00039d30:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 00039d40:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 00039d50:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 00039d60:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 00039d70:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 00039d80:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 00039d90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00039da0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 00039dc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00039dd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00039de0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 00039df0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 00039e00:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 00039e10:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 00039e20:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 00039e30:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 00039e40:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 00039e50:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| Max diff block lines reached; 250530/270594 bytes (92.59%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 40 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 90, 14 lines modified | Offset 90, 35 lines modified | ||
| 90 | ···························1.7,·SR·1.8,·SR·1.9 | 90 | ···························1.7,·SR·1.8,·SR·1.9 |
| 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 96 | ···························SRG-OS-000373-GPOS-00158 | 96 | ···························SRG-OS-000373-GPOS-00158 |
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 102 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 103 | ··if·[·!·-e·"$f"·]·;·then | ||
| 104 | ····continue | ||
| 105 | ··fi | ||
| 106 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 107 | ··if·!·test·-z·"$matching_list";·then | ||
| 108 | ····while·IFS=·read·-r·entry;·do | ||
| 109 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 110 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 111 | ····done·<<<·"$matching_list" | ||
| 112 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 113 | visudo" | ||
| 114 | ··fi | ||
| 115 | done | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 102 | -·name:·Find·/etc/sudoers.d/·files | 121 | -·name:·Find·/etc/sudoers.d/·files |
| 103 | ··ansible.builtin.find: | 122 | ··ansible.builtin.find: |
| Offset 128, 35 lines modified | Offset 149, 14 lines modified | ||
| 128 | ··-·NIST-800-53-IA-11 | 149 | ··-·NIST-800-53-IA-11 |
| 129 | ··-·low_complexity | 150 | ··-·low_complexity |
| 130 | ··-·low_disruption | 151 | ··-·low_disruption |
| 131 | ··-·medium_severity | 152 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 133 | ··-·restrict_strategy | 154 | ··-·restrict_strategy |
| 134 | ··-·sudo_remove_no_authenticate | 155 | ··-·sudo_remove_no_authenticate |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 140 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 141 | ··if·[·!·-e·"$f"·]·;·then | ||
| 142 | ····continue | ||
| 143 | ··fi | ||
| 144 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 145 | ··if·!·test·-z·"$matching_list";·then | ||
| 146 | ····while·IFS=·read·-r·entry;·do | ||
| 147 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 148 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 149 | ····done·<<<·"$matching_list" | ||
| 150 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 151 | visudo" | ||
| 152 | ··fi | ||
| 153 | done | ||
| 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 155 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 157 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 158 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 157 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 159 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 158 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 160 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 159 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 161 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 160 | ············Without·re-authentication,·users·may·access·resources·or·perform | 162 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 177, 14 lines modified | Offset 177, 35 lines modified | ||
| 177 | ···························1.7,·SR·1.8,·SR·1.9 | 177 | ···························1.7,·SR·1.8,·SR·1.9 |
| 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 183 | ···························SRG-OS-000373-GPOS-00158 | 183 | ···························SRG-OS-000373-GPOS-00158 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 189 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 190 | ··if·[·!·-e·"$f"·]·;·then | ||
| 191 | ····continue | ||
| 192 | ··fi | ||
| 193 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 194 | ··if·!·test·-z·"$matching_list";·then | ||
| 195 | ····while·IFS=·read·-r·entry;·do | ||
| 196 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 197 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 198 | ····done·<<<·"$matching_list" | ||
| 199 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 200 | visudo" | ||
| 201 | ··fi | ||
| 202 | done | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 189 | -·name:·Find·/etc/sudoers.d/·files | 208 | -·name:·Find·/etc/sudoers.d/·files |
| 190 | ··ansible.builtin.find: | 209 | ··ansible.builtin.find: |
| Offset 215, 35 lines modified | Offset 236, 14 lines modified | ||
| 215 | ··-·NIST-800-53-IA-11 | 236 | ··-·NIST-800-53-IA-11 |
| 216 | ··-·low_complexity | 237 | ··-·low_complexity |
| 217 | ··-·low_disruption | 238 | ··-·low_disruption |
| Max diff block lines reached; 32794/38535 bytes (85.10%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d30:·6173·206f·6620·3230·323 | 00037d30:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16047, 146 lines modified | Offset 16047, 146 lines modified | ||
| 0003eae0:·7267·6574·3d22·2369·646d·3139·3738·2220··rget="#idm1978"· | 0003eae0:·7267·6574·3d22·2369·646d·3139·3738·2220··rget="#idm1978"· | ||
| 0003eaf0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003eaf0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003eb00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003eb00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003eb10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003eb10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003eb20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003eb20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003eb30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003eb30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003eb40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003eb40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003eb50:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003eb60:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003eb70:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003eb80:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003eb90:·643d·2269·646d·3139·3738·223e·3c74·6162··d="idm1978"><tab | |||
| 0003eba0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003ebb0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ebc0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ebd0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ebe0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ebf0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ec00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ec10:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003ec20:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ec30:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ec40:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003ec50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ec60:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ec70:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003ec80:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ec90:·3c63·6f64·653e·0a66·6f72·2066·2069·6e20··<code>.for·f·in· | |||
| 0003eca0:·2f65·7463·2f73·7564·6f65·7273·202f·6574··/etc/sudoers·/et | |||
| 0003ecb0:·632f·7375·646f·6572·732e·642f·2a20·3b20··c/sudoers.d/*·;· | |||
| 0003ecc0:·646f·0a20·2069·6620·5b20·2120·2d65·2022··do.··if·[·!·-e·" | |||
| 0003ecd0:·2466·2220·5d20·3b20·7468·656e·0a20·2020··$f"·]·;·then.··· | |||
| 0003ece0:·2063·6f6e·7469·6e75·650a·2020·6669·0a20···continue.··fi.· | |||
| 0003ecf0:·206d·6174·6368·696e·675f·6c69·7374·3d24···matching_list=$ | |||
| 0003ed00:·2867·7265·7020·2d50·2027·5e28·3f21·2329··(grep·-P·'^(?!#) | |||
| 0003ed10:·2e2a·5b5c·735d·2b5c·2161·7574·6865·6e74··.*[\s]+\!authent | |||
| 0003ed20:·6963·6174·652e·2a24·2720·2466·207c·2075··icate.*$'·$f·|·u | |||
| 0003ed30:·6e69·7120·290a·2020·6966·2021·2074·6573··niq·).··if·!·tes | |||
| 0003ed40:·7420·2d7a·2022·246d·6174·6368·696e·675f··t·-z·"$matching_ | |||
| 0003ed50:·6c69·7374·223b·2074·6865·6e0a·2020·2020··list";·then.···· | |||
| 0003ed60:·7768·696c·6520·4946·533d·2072·6561·6420··while·IFS=·read· | |||
| 0003ed70:·2d72·2065·6e74·7279·3b20·646f·0a20·2020··-r·entry;·do.··· | |||
| 0003ed80:·2020·2023·2063·6f6d·6d65·6e74·206f·7574·····#·comment·out | |||
| 0003ed90:·2022·2161·7574·6865·6e74·6963·6174·6522···"!authenticate" | |||
| 0003eda0:·206d·6174·6368·6573·2074·6f20·7072·6573···matches·to·pres | |||
| 0003edb0:·6572·7665·2075·7365·7220·6461·7461·0a20··erve·user·data.· | |||
| 0003edc0:·2020·2020·2073·6564·202d·6920·2273·2f5e·······sed·-i·"s/^ | |||
| 0003edd0:·247b·656e·7472·797d·242f·2320·2661·6d70··${entry}$/#·& | |||
| 0003ede0:·3b2f·6722·2024·660a·2020·2020·646f·6e65··;/g"·$f.····done | |||
| 0003edf0:·2026·6c74·3b26·6c74·3b26·6c74·3b20·2224···<<<·"$ | |||
| 0003ee00:·6d61·7463·6869·6e67·5f6c·6973·7422·0a0a··matching_list".. | |||
| 0003ee10:·2020·2020·2f75·7372·2f73·6269·6e2f·7669······/usr/sbin/vi | |||
| 0003ee20:·7375·646f·202d·6366·2024·6620·2661·6d70··sudo·-cf·$f·& | |||
| 0003ee30:·3b26·6774·3b20·2f64·6576·2f6e·756c·6c20··;>·/dev/null· | |||
| 0003ee40:·7c7c·2065·6368·6f20·2246·6169·6c20·746f··||·echo·"Fail·to | |||
| 0003ee50:·2076·616c·6964·6174·6520·2466·2077·6974···validate·$f·wit | |||
| 0003ee60:·6820·7669·7375·646f·220a·2020·6669·0a64··h·visudo".··fi.d | |||
| 0003ee70:·6f6e·650a·3c2f·636f·6465·3e3c·2f70·7265··one.</code></pre | |||
| 0003ee80:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003ee90:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003eea0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003eeb0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003eec0:·7267·6574·3d22·2369·646d·3139·3739·2220··rget="#idm1979"· | |||
| 0003eed0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003eee0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003eef0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003ef00:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003ef10:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003ef20:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003e | 0003ef30:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003e | 0003ef40:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003e | 0003ef50:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003e | 0003ef60:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003e | 0003ef70:·2220·6964·3d22·6964·6d31·3937·3922·3e3c··"·id="idm1979">< | ||
| 0003e | 0003ef80:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003e | 0003ef90:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003e | 0003efa0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003e | 0003efb0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003e | 0003efc0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003e | 0003efd0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003e | 0003efe0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003e | 0003eff0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003ec20:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ec30:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003ec40:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003ec50:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ec60:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003ec70:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | |||
| 0003ec80:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003ec90:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003eca0:·2046·696e·6420·2f65·7463·2f73·7564·6f65···Find·/etc/sudoe | |||
| 0003ecb0:·7273·2e64·2f20·6669·6c65·730a·2020·616e··rs.d/·files.··an | |||
| 0003ecc0:·7369·626c·652e·6275·696c·7469·6e2e·6669··sible.builtin.fi | |||
| 0003ecd0:·6e64·3a0a·2020·2020·7061·7468·733a·0a20··nd:.····paths:.· | |||
| 0003ece0:·2020·202d·202f·6574·632f·7375·646f·6572·····-·/etc/sudoer | |||
| 0003ecf0:·732e·642f·0a20·2072·6567·6973·7465·723a··s.d/.··register: | |||
| 0003ed00:·2073·7564·6f65·7273·0a20·2074·6167·733a···sudoers.··tags: | |||
| 0003ed10:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003ed20:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 0003ed30:·542d·3830·302d·3533·2d49·412d·3131·0a20··T-800-53-IA-11.· | |||
| 0003ed40:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003ed50:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003ed60:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003ed70:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003ed80:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003ed90:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | |||
| 0003eda0:·6567·790a·2020·2d20·7375·646f·5f72·656d··egy.··-·sudo_rem | |||
| 0003edb0:·6f76·655f·6e6f·5f61·7574·6865·6e74·6963··ove_no_authentic | |||
| 0003edc0:·6174·650a·0a2d·206e·616d·653a·2052·656d··ate..-·name:·Rem | |||
| 0003edd0:·6f76·6520·6c69·6e65·7320·636f·6e74·6169··ove·lines·contai | |||
| 0003ede0:·6e69·6e67·2021·6175·7468·656e·7469·6361··ning·!authentica | |||
| Max diff block lines reached; 991016/1010942 bytes (98.03%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 234, 14 lines modified | Offset 234, 35 lines modified | ||
| 234 | ···························1.7,·SR·1.8,·SR·1.9 | 234 | ···························1.7,·SR·1.8,·SR·1.9 |
| 235 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 235 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 236 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 236 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 237 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 237 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 239 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 239 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 240 | ···························SRG-OS-000373-GPOS-00158 | 240 | ···························SRG-OS-000373-GPOS-00158 |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 246 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 247 | ··if·[·!·-e·"$f"·]·;·then | ||
| 248 | ····continue | ||
| 249 | ··fi | ||
| 250 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 251 | ··if·!·test·-z·"$matching_list";·then | ||
| 252 | ····while·IFS=·read·-r·entry;·do | ||
| 253 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 254 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 255 | ····done·<<<·"$matching_list" | ||
| 256 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 257 | visudo" | ||
| 258 | ··fi | ||
| 259 | done | ||
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 246 | -·name:·Find·/etc/sudoers.d/·files | 265 | -·name:·Find·/etc/sudoers.d/·files |
| 247 | ··ansible.builtin.find: | 266 | ··ansible.builtin.find: |
| Offset 272, 35 lines modified | Offset 293, 14 lines modified | ||
| 272 | ··-·NIST-800-53-IA-11 | 293 | ··-·NIST-800-53-IA-11 |
| 273 | ··-·low_complexity | 294 | ··-·low_complexity |
| 274 | ··-·low_disruption | 295 | ··-·low_disruption |
| 275 | ··-·medium_severity | 296 | ··-·medium_severity |
| 276 | ··-·no_reboot_needed | 297 | ··-·no_reboot_needed |
| 277 | ··-·restrict_strategy | 298 | ··-·restrict_strategy |
| 278 | ··-·sudo_remove_no_authenticate | 299 | ··-·sudo_remove_no_authenticate |
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 280 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 281 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 282 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 283 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 284 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 285 | ··if·[·!·-e·"$f"·]·;·then | ||
| 286 | ····continue | ||
| 287 | ··fi | ||
| 288 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 289 | ··if·!·test·-z·"$matching_list";·then | ||
| 290 | ····while·IFS=·read·-r·entry;·do | ||
| 291 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 292 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 293 | ····done·<<<·"$matching_list" | ||
| 294 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 295 | visudo" | ||
| 296 | ··fi | ||
| 297 | done | ||
| 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 299 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 301 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 300 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 302 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 301 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 303 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 302 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 304 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 303 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 305 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 304 | ············Without·re-authentication,·users·may·access·resources·or·perform | 306 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 321, 14 lines modified | Offset 321, 35 lines modified | ||
| 321 | ···························1.7,·SR·1.8,·SR·1.9 | 321 | ···························1.7,·SR·1.8,·SR·1.9 |
| 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 323 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 323 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 324 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 324 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 327 | ···························SRG-OS-000373-GPOS-00158 | 327 | ···························SRG-OS-000373-GPOS-00158 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 333 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 334 | ··if·[·!·-e·"$f"·]·;·then | ||
| 335 | ····continue | ||
| 336 | ··fi | ||
| 337 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 338 | ··if·!·test·-z·"$matching_list";·then | ||
| 339 | ····while·IFS=·read·-r·entry;·do | ||
| 340 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 341 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 342 | ····done·<<<·"$matching_list" | ||
| 343 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 344 | visudo" | ||
| 345 | ··fi | ||
| 346 | done | ||
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 333 | -·name:·Find·/etc/sudoers.d/·files | 352 | -·name:·Find·/etc/sudoers.d/·files |
| 334 | ··ansible.builtin.find: | 353 | ··ansible.builtin.find: |
| Offset 359, 35 lines modified | Offset 380, 14 lines modified | ||
| 359 | ··-·NIST-800-53-IA-11 | 380 | ··-·NIST-800-53-IA-11 |
| 360 | ··-·low_complexity | 381 | ··-·low_complexity |
| 361 | ··-·low_disruption | 382 | ··-·low_disruption |
| Max diff block lines reached; 119311/125053 bytes (95.41%) of diff not shown. | |||
| Offset 14282, 16 lines modified | Offset 14282, 16 lines modified | ||
| 00037c90:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037c90:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037ca0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037ca0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037cb0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037cb0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037cc0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037cc0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037cd0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037cd0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ce0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ce0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037cf0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cf0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d00:·2028·6173·206f·6620·3230·323 | 00037d00:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00037d10:·3 | 00037d10:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 00037d20:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037d20:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037d30:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037d30:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037d40:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037d40:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037d50:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037d50:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037d60:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037d60:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037d70:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037d70:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037d80:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037d80:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 16680, 168 lines modified | Offset 16680, 168 lines modified | ||
| 00041270:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00041270:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00041280:·2223·6964·6d36·3836·3622·2074·6162·696e··"#idm6866"·tabin | 00041280:·2223·6964·6d36·3836·3622·2074·6162·696e··"#idm6866"·tabin | ||
| 00041290:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 00041290:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 000412a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 000412a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 000412b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 000412b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 000412c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 000412c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 000412d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 000412d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 000412e0:·3e52·656d·6564·6961·7469·6f6e·20 | 000412e0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 000412f0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 00041300:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00041310:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00041320:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00041330:·6d36·3836·3622·3e3c·7461·626c·6520·636c··m6866"><table·cl | |||
| 00041340:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00041350:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00041360:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00041370:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00041380:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00041390:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 000413a0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 000413b0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 000413c0:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 000413d0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 000413e0:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 000413f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 000412f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 00041300:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00041310:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00041320:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00041330:·2269·646d·3638·3636·223e·3c74·6162·6c65··"idm6866"><table | |||
| 00041340:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00041350:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00041360:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00041370:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00041380:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00041390:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000413a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 000413b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 000413c0:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 000413d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 000413e0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 000413f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00041400:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00041410:·3e64·6973·6162·6c65·3c2f·7464·3e3c·2f74··>disable</td></t | |||
| 00041420:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00041430:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 00041440:·7572·6520·6b65·726e·656c·206d·6f64·756c··ure·kernel·modul | |||
| 00041450:·6520·2772·6473·2720·6973·2064·6973·6162··e·'rds'·is·disab | |||
| 00041460:·6c65·640a·2020·6c69·6e65·696e·6669·6c65··led.··lineinfile | |||
| 00041470:·3a0a·2020·2020·6372·6561·7465·3a20·7472··:.····create:·tr | |||
| 00041480:·7565·0a20·2020·2064·6573·743a·202f·6574··ue.····dest:·/et | |||
| 00041490:·632f·6d6f·6470·726f·6265·2e64·2f72·6473··c/modprobe.d/rds | |||
| 000414a0:·2e63·6f6e·660a·2020·2020·7265·6765·7870··.conf.····regexp | |||
| 000414b0:·3a20·696e·7374·616c·6c5c·732b·7264·730a··:·install\s+rds. | |||
| 000414c0:·2020·2020·6c69·6e65·3a20·696e·7374·616c······line:·instal | |||
| 000414d0:·6c20·7264·7320·2f62·696e·2f66·616c·7365··l·rds·/bin/false | |||
| 000414e0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 000414f0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 00041500:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 00041510:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 00041520:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 00041530:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00041540:·2074·6167·733a·0a20·202d·204e·4953·542d···tags:.··-·NIST- | |||
| 00041550:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 00041560:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 00041570:·4d2d·3728·6129·0a20·202d·204e·4953·542d··M-7(a).··-·NIST- | |||
| 00041580:·3830·302d·3533·2d43·4d2d·3728·6229·0a20··800-53-CM-7(b).· | |||
| 00041590:·202d·2064·6973·6162·6c65·5f73·7472·6174···-·disable_strat | |||
| 000415a0:·6567·790a·2020·2d20·6b65·726e·656c·5f6d··egy.··-·kernel_m | |||
| 000415b0:·6f64·756c·655f·7264·735f·6469·7361·626c··odule_rds_disabl | |||
| 000415c0:·6564·0a20·202d·206c·6f77·5f63·6f6d·706c··ed.··-·low_compl | |||
| 000415d0:·6578·6974·790a·2020·2d20·6c6f·775f·7365··exity.··-·low_se | |||
| 000415e0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | |||
| 000415f0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | |||
| 00041600:·2072·6562·6f6f·745f·7265·7175·6972·6564···reboot_required | |||
| 00041610:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 00041620:·206b·6572·6e65·6c20·6d6f·6475·6c65·2027···kernel·module·' | |||
| 00041630:·7264·7327·2069·7320·626c·6163·6b6c·6973··rds'·is·blacklis | |||
| 00041640:·7465·640a·2020·6c69·6e65·696e·6669·6c65··ted.··lineinfile | |||
| 00041650:·3a0a·2020·2020·6372·6561·7465·3a20·7472··:.····create:·tr | |||
| 00041660:·7565·0a20·2020·2064·6573·743a·202f·6574··ue.····dest:·/et | |||
| 00041670:·632f·6d6f·6470·726f·6265·2e64·2f72·6473··c/modprobe.d/rds | |||
| 00041680:·2e63·6f6e·660a·2020·2020·7265·6765·7870··.conf.····regexp | |||
| 00041690:·3a20·5e62·6c61·636b·6c69·7374·2072·6473··:·^blacklist·rds | |||
| 000416a0:·240a·2020·2020·6c69·6e65·3a20·626c·6163··$.····line:·blac | |||
| 000416b0:·6b6c·6973·7420·7264·730a·2020·7768·656e··klist·rds.··when | |||
| 000416c0:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 000416d0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000416e0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 000416f0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00041700:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00041710:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 00041720:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00041730:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 00041740:·2d38·3030·2d35·332d·434d·2d37·2861·290a··-800-53-CM-7(a). | |||
| 00041750:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00041760:·434d·2d37·2862·290a·2020·2d20·6469·7361··CM-7(b).··-·disa | |||
| 00041770:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 00041780:·206b·6572·6e65·6c5f·6d6f·6475·6c65·5f72···kernel_module_r | |||
| 00041790:·6473·5f64·6973·6162·6c65·640a·2020·2d20··ds_disabled.··-· | |||
| 000417a0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 000417b0:·202d·206c·6f77·5f73·6576·6572·6974·790a···-·low_severity. | |||
| 000417c0:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | |||
| 000417d0:·7074·696f·6e0a·2020·2d20·7265·626f·6f74··ption.··-·reboot | |||
| 000417e0:·5f72·6571·7569·7265·640a·3c2f·636f·6465··_required.</code | |||
| 000417f0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00041800:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00041810:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00041820:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00041830:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| Max diff block lines reached; 1645564/1668664 bytes (98.62%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·18.04·LTS·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·18.04·LTS·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 48 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 51 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| Offset 302, 14 lines modified | Offset 302, 37 lines modified | ||
| 302 | ···························SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR | 302 | ···························SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR |
| 303 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR | 303 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR |
| 304 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 304 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 306 | ···························A.9.1.2 | 306 | ···························A.9.1.2 |
| 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 314 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 315 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 316 | if·LC_ALL=C·grep·-q·-m·1·"^install·rds"·/etc/modprobe.d/rds.conf·;·then | ||
| 317 | » | ||
| 318 | » sed·-i·'s#^install·rds.*#install·rds·/bin/false#g'·/etc/modprobe.d/rds.conf | ||
| 319 | else | ||
| 320 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/rds.conf | ||
| 321 | » echo·"install·rds·/bin/false"·>>·/etc/modprobe.d/rds.conf | ||
| 322 | fi | ||
| 323 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·rds$"·/etc/modprobe.d/rds.conf·;·then | ||
| 324 | » echo·"blacklist·rds"·>>·/etc/modprobe.d/rds.conf | ||
| 325 | fi | ||
| 326 | else | ||
| 327 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 328 | fi | ||
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 314 | -·name:·Ensure·kernel·module·'rds'·is·disabled | 334 | -·name:·Ensure·kernel·module·'rds'·is·disabled |
| 315 | ··lineinfile: | 335 | ··lineinfile: |
| Offset 344, 37 lines modified | Offset 367, 14 lines modified | ||
| 344 | ··-·NIST-800-53-CM-7(b) | 367 | ··-·NIST-800-53-CM-7(b) |
| 345 | ··-·disable_strategy | 368 | ··-·disable_strategy |
| 346 | ··-·kernel_module_rds_disabled | 369 | ··-·kernel_module_rds_disabled |
| 347 | ··-·low_complexity | 370 | ··-·low_complexity |
| 348 | ··-·low_severity | 371 | ··-·low_severity |
| 349 | ··-·medium_disruption | 372 | ··-·medium_disruption |
| 350 | ··-·reboot_required | 373 | ··-·reboot_required |
| 351 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 352 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 353 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 354 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 355 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 356 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 357 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 358 | if·LC_ALL=C·grep·-q·-m·1·"^install·rds"·/etc/modprobe.d/rds.conf·;·then | ||
| 359 | » | ||
| 360 | » sed·-i·'s#^install·rds.*#install·rds·/bin/false#g'·/etc/modprobe.d/rds.conf | ||
| 361 | else | ||
| 362 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/rds.conf | ||
| 363 | » echo·"install·rds·/bin/false"·>>·/etc/modprobe.d/rds.conf | ||
| 364 | fi | ||
| 365 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·rds$"·/etc/modprobe.d/rds.conf·;·then | ||
| 366 | » echo·"blacklist·rds"·>>·/etc/modprobe.d/rds.conf | ||
| 367 | fi | ||
| 368 | else | ||
| 369 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 370 | fi | ||
| 371 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·T\x8TI\x8IP\x8PC\x8C·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 374 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·T\x8TI\x8IP\x8PC\x8C·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 372 | The·Transparent·Inter-Process·Communication·(TIPC)·protocol·is·designed·to·provide | 375 | The·Transparent·Inter-Process·Communication·(TIPC)·protocol·is·designed·to·provide |
| 373 | communications·between·nodes·in·a·cluster.·To·configure·the·system·to·prevent·the·tipc | 376 | communications·between·nodes·in·a·cluster.·To·configure·the·system·to·prevent·the·tipc |
| 374 | kernel·module·from·being·loaded,·add·the·following·line·to·the·file·/etc/modprobe.d/ | 377 | kernel·module·from·being·loaded,·add·the·following·line·to·the·file·/etc/modprobe.d/ |
| 375 | tipc.conf: | 378 | tipc.conf: |
| 376 | install·tipc·/bin/false | 379 | install·tipc·/bin/false |
| 377 | Warning: ·This·configuration·baseline·was·created·to·deploy·the·base·operating·system·for | 380 | Warning: ·This·configuration·baseline·was·created·to·deploy·the·base·operating·system·for |
| Offset 399, 14 lines modified | Offset 399, 37 lines modified | ||
| 399 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 399 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 400 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 400 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 401 | ···························A.9.1.2 | 401 | ···························A.9.1.2 |
| 402 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 402 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 403 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 403 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 404 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 404 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 405 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000095-GPOS-00049 | 405 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000095-GPOS-00049 |
| 406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 407 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 408 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 409 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 410 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 411 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 412 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 413 | if·LC_ALL=C·grep·-q·-m·1·"^install·tipc"·/etc/modprobe.d/tipc.conf·;·then | ||
| 414 | » | ||
| 415 | » sed·-i·'s#^install·tipc.*#install·tipc·/bin/false#g'·/etc/modprobe.d/tipc.conf | ||
| 416 | else | ||
| 417 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/tipc.conf | ||
| 418 | » echo·"install·tipc·/bin/false"·>>·/etc/modprobe.d/tipc.conf | ||
| 419 | fi | ||
| 420 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·tipc$"·/etc/modprobe.d/tipc.conf·;·then | ||
| 421 | » echo·"blacklist·tipc"·>>·/etc/modprobe.d/tipc.conf | ||
| 422 | fi | ||
| 423 | else | ||
| 424 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 425 | fi | ||
| 406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 426 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 407 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 427 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 408 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 428 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 409 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 429 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 410 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 430 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| Max diff block lines reached; 206996/213058 bytes (97.15%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16256, 741 lines modified | Offset 16256, 741 lines modified | ||
| 0003f7f0:·2d74·6172·6765·743d·2223·6964·6d35·3137··-target="#idm517 | 0003f7f0:·2d74·6172·6765·743d·2223·6964·6d35·3137··-target="#idm517 | ||
| 0003f800:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003f800:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003f810:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003f810:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003f820:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003f820:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003f830:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003f830:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003f840:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003f840:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (727 lines added, 727 lines removed) | |
| 0003f850:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003f850:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003f860:·7469·6f6e·20 | 0003f860:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003f870:·7 | 0003f870:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003f880:· | 0003f880:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003f890:·6 | 0003f890:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003f8a0:· | 0003f8a0:·2220·6964·3d22·6964·6d35·3137·3222·3e3c··"·id="idm5172">< | ||
| 0003f8b0:·2 | 0003f8b0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003f8c0:· | 0003f8c0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003f8d0:· | 0003f8d0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003f8e0:· | 0003f8e0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003f8f0:·6 | 0003f8f0:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | ||
| 0003f900:·6 | 0003f900:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | ||
| 0003f910:· | 0003f910:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | ||
| 0003f920:· | 0003f920:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | ||
| 0003f930:· | 0003f930:·7468·656e·0a0a·2320·4c69·7374·206f·6620··then..#·List·of· | ||
| 0003f940:· | 0003f940:·6c6f·6720·6669·6c65·2070·6174·6873·2074··log·file·paths·t | ||
| 0003f950:· | 0003f950:·6f20·6265·2069·6e73·7065·6374·6564·2066··o·be·inspected·f | ||
| 0003f960:· | 0003f960:·6f72·2063·6f72·7265·6374·2070·6572·6d69··or·correct·permi | ||
| 0003f970:· | 0003f970:·7373·696f·6e73·0a23·202a·2050·7269·6d61··ssions.#·*·Prima | ||
| 0003f980:· | 0003f980:·7269·6c79·2069·6e73·7065·6374·206c·6f67··rily·inspect·log | ||
| 0003f990:· | 0003f990:·2066·696c·6520·7061·7468·7320·6c69·7374···file·paths·list | ||
| 0003f9a0:·6 | 0003f9a0:·6564·2069·6e20·2f65·7463·2f72·7379·736c··ed·in·/etc/rsysl | ||
| 0003f9b0:· | 0003f9b0:·6f67·2e63·6f6e·660a·5253·5953·4c4f·475f··og.conf.RSYSLOG_ | ||
| 0003f9c0:· | 0003f9c0:·4554·435f·434f·4e46·4947·3d22·2f65·7463··ETC_CONFIG="/etc | ||
| 0003f9d0:· | 0003f9d0:·2f72·7379·736c·6f67·2e63·6f6e·6622·0a23··/rsyslog.conf".# | ||
| 0003f9e0:· | 0003f9e0:·202a·2041·6e64·2061·6c73·6f20·7468·6520···*·And·also·the· | ||
| 0003f9f0:· | 0003f9f0:·6c6f·6720·6669·6c65·2070·6174·6873·206c··log·file·paths·l | ||
| 0003fa00:·6 | 0003fa00:·6973·7465·6420·6166·7465·7220·7273·7973··isted·after·rsys | ||
| 0003fa10:·6 | 0003fa10:·6c6f·6727·7320·2449·6e63·6c75·6465·436f··log's·$IncludeCo | ||
| 0003fa20:·6 | 0003fa20:·6e66·6967·2064·6972·6563·7469·7665·0a23··nfig·directive.# | ||
| 0003fa30:· | 0003fa30:·2020·2028·7374·6f72·6520·7468·6520·7265·····(store·the·re | ||
| 0003fa40:· | 0003fa40:·7375·6c74·2069·6e74·6f20·6172·7261·7920··sult·into·array· | ||
| 0003fa50:· | 0003fa50:·666f·7220·7468·6520·6361·7365·2074·6865··for·the·case·the | ||
| 0003fa60:· | 0003fa60:·7265·2773·2073·6865·6c6c·2067·6c6f·6220··re's·shell·glob· | ||
| 0003fa70:·75 | 0003fa70:·7573·6564·2061·7320·7661·6c75·6520·6f66··used·as·value·of | ||
| 0003fa80:· | 0003fa80:·2049·6e63·6c75·6465·436f·6e66·6967·290a···IncludeConfig). | ||
| 0003fa90:· | 0003fa90:·7265·6164·6172·7261·7920·2d74·204f·4c44··readarray·-t·OLD | ||
| 0003faa0:· | 0003faa0:·5f49·4e43·2026·6c74·3b20·266c·743b·2867··_INC·<·<(g | ||
| 0003fab0:· | 0003fab0:·7265·7020·2d65·2022·5c24·496e·636c·7564··rep·-e·"\$Includ | ||
| 0003fac0:· | 0003fac0:·6543·6f6e·6669·675b·5b3a·7370·6163·653a··eConfig[[:space: | ||
| 0003fad0:· | 0003fad0:·5d5d·5c2b·5b5e·5b3a·7370·6163·653a·5d3b··]]\+[^[:space:]; | ||
| 0003fae0:·5 | 0003fae0:·5d5c·2b22·202f·6574·632f·7273·7973·6c6f··]\+"·/etc/rsyslo | ||
| 0003faf0:· | 0003faf0:·672e·636f·6e66·207c·2063·7574·202d·6420··g.conf·|·cut·-d· | ||
| 0003fb00:· | 0003fb00:·2720·2720·2d66·2032·290a·7265·6164·6172··'·'·-f·2).readar | ||
| 0003fb10:· | 0003fb10:·7261·7920·2d74·2052·5359·534c·4f47·5f49··ray·-t·RSYSLOG_I | ||
| 0003fb20:· | 0003fb20:·4e43·4c55·4445·5f43·4f4e·4649·4720·266c··NCLUDE_CONFIG·&l | ||
| 0003fb30:· | 0003fb30:·743b·2026·6c74·3b28·666f·7220·494e·4350··t;·<(for·INCP | ||
| 0003fb40:· | 0003fb40:·4154·4820·696e·2022·247b·4f4c·445f·494e··ATH·in·"${OLD_IN | ||
| 0003fb50:· | 0003fb50:·435b·405d·7d22·3b20·646f·2065·7661·6c20··C[@]}";·do·eval· | ||
| 0003fb60:· | 0003fb60:·7072·696e·7466·2027·2573·5c5c·6e27·2022··printf·'%s\\n'·" | ||
| 0003fb70:· | 0003fb70:·247b·494e·4350·4154·487d·223b·2064·6f6e··${INCPATH}";·don | ||
| 0003fb80:· | 0003fb80:·6529·0a72·6561·6461·7272·6179·202d·7420··e).readarray·-t· | ||
| 0003fb90:· | 0003fb90:·4e45·575f·494e·4320·266c·743b·2026·6c74··NEW_INC·<·< | ||
| 0003fba0:· | 0003fba0:·3b28·7365·6420·2d6e·2027·2f5e·5c73·2a69··;(sed·-n·'/^\s*i | ||
| 0003fbb0:·6 | 0003fbb0:·6e63·6c75·6465·282f·2c2f·292f·4970·2720··nclude(/,/)/Ip'· | ||
| 0003fbc0:·2 | 0003fbc0:·2f65·7463·2f72·7379·736c·6f67·2e63·6f6e··/etc/rsyslog.con | ||
| 0003fbd0:·6 | 0003fbd0:·6620·7c20·7365·6420·2d6e·2027·7340·2e2a··f·|·sed·-n·'s@.* | ||
| 0003fbe0:·6 | 0003fbe0:·6669·6c65·5c73·2a3d·5c73·2a22·5c28·5b2f··file\s*=\s*"\([/ | ||
| 0003fbf0:· | 0003fbf0:·5b3a·616c·6e75·6d3a·5d5b·3a70·756e·6374··[:alnum:][:punct | ||
| 0003fc00:· | 0003fc00:·3a5d·5d2a·5c29·222e·2a40·5c31·4049·7027··:]]*\)".*@\1@Ip' | ||
| 0003fc10:· | 0003fc10:·290a·7265·6164·6172·7261·7920·2d74·2052··).readarray·-t·R | ||
| 0003fc20:· | 0003fc20:·5359·534c·4f47·5f49·4e43·4c55·4445·2026··SYSLOG_INCLUDE·& | ||
| 0003fc30:· | 0003fc30:·6c74·3b20·266c·743b·2866·6f72·2049·4e43··lt;·<(for·INC | ||
| 0003fc40:· | 0003fc40:·5041·5448·2069·6e20·2224·7b4e·4557·5f49··PATH·in·"${NEW_I | ||
| 0003fc50:· | 0003fc50:·4e43·5b40·5d7d·223b·2064·6f20·6576·616c··NC[@]}";·do·eval | ||
| 0003fc60:·2 | 0003fc60:·2070·7269·6e74·6620·2725·735c·5c6e·2720···printf·'%s\\n'· | ||
| 0003fc70:· | 0003fc70:·2224·7b49·4e43·5041·5448·7d22·3b20·646f··"${INCPATH}";·do | ||
| 0003fc80:· | 0003fc80:·6e65·290a·0a23·2044·6563·6c61·7265·2061··ne)..#·Declare·a | ||
| 0003fc90:· | 0003fc90:·6e20·6172·7261·7920·746f·2068·6f6c·6420··n·array·to·hold· | ||
| 0003fca0:· | 0003fca0:·7468·6520·6669·6e61·6c20·6c69·7374·206f··the·final·list·o | ||
| 0003fcb0:· | 0003fcb0:·6620·6469·6666·6572·656e·7420·6c6f·6720··f·different·log· | ||
| 0003fcc0:· | 0003fcc0:·6669·6c65·2070·6174·6873·0a64·6563·6c61··file·paths.decla | ||
| 0003fcd0:· | 0003fcd0:·7265·202d·6120·4c4f·475f·4649·4c45·5f50··re·-a·LOG_FILE_P | ||
| 0003fce0:· | 0003fce0:·4154·4853·0a0a·2320·4172·7261·7920·746f··ATHS..#·Array·to | ||
| 0003fcf0:· | 0003fcf0:·2068·6f6c·6420·616c·6c20·7273·7973·6c6f···hold·all·rsyslo | ||
| 0003fd00:·6 | 0003fd00:·6720·636f·6e66·6967·2065·6e74·7269·6573··g·config·entries | ||
| 0003fd10:· | 0003fd10:·0a52·5359·534c·4f47·5f43·4f4e·4649·4753··.RSYSLOG_CONFIGS | ||
| 0003fd20:· | 0003fd20:·3d28·290a·5253·5953·4c4f·475f·434f·4e46··=().RSYSLOG_CONF | ||
| 0003fd30:· | 0003fd30:·4947·533d·2822·247b·5253·5953·4c4f·475f··IGS=("${RSYSLOG_ | ||
| 0003fd40:· | 0003fd40:·4554·435f·434f·4e46·4947·7d22·2022·247b··ETC_CONFIG}"·"${ | ||
| 0003fd50:· | 0003fd50:·5253·5953·4c4f·475f·494e·434c·5544·455f··RSYSLOG_INCLUDE_ | ||
| 0003fd60:· | 0003fd60:·434f·4e46·4947·5b40·5d7d·2220·2224·7b52··CONFIG[@]}"·"${R | ||
| 0003fd70:·35 | 0003fd70:·5359·534c·4f47·5f49·4e43·4c55·4445·5b40··SYSLOG_INCLUDE[@ | ||
| 0003fd80:·5 | 0003fd80:·5d7d·2229·0a0a·2320·4765·7420·6675·6c6c··]}")..#·Get·full | ||
| 0003fd90:· | 0003fd90:·206c·6973·7420·6f66·2066·696c·6573·2074···list·of·files·t | ||
| 0003fda0:· | 0003fda0:·6f20·6265·2063·6865·636b·6564·0a23·2052··o·be·checked.#·R | ||
| 0003fdb0:· | 0003fdb0:·5359·534c·4f47·5f43·4f4e·4649·4753·206d··SYSLOG_CONFIGS·m | ||
| 0003fdc0:·6 | 0003fdc0:·6179·2063·6f6e·7461·696e·2067·6c6f·6273··ay·contain·globs | ||
| 0003fdd0:· | 0003fdd0:·2073·7563·6820·6173·0a23·202f·6574·632f···such·as.#·/etc/ | ||
| 0003fde0:· | 0003fde0:·7273·7973·6c6f·672e·642f·2a2e·636f·6e66··rsyslog.d/*.conf | ||
| 0003fdf0:·6 | 0003fdf0:·202f·6574·632f·7273·7973·6c6f·672e·642f···/etc/rsyslog.d/ | ||
| 0003fe00:· | 0003fe00:·2a2e·6672·756c·650a·2320·536f·2c20·6c6f··*.frule.#·So,·lo | ||
| 0003fe10:· | 0003fe10:·6f70·206f·7665·7220·7468·6520·656e·7472··op·over·the·entr | ||
| 0003fe20:·6 | 0003fe20:·6965·7320·696e·2052·5359·534c·4f47·5f43··ies·in·RSYSLOG_C | ||
| 0003fe30:· | 0003fe30:·4f4e·4649·4753·2061·6e64·2075·7365·2066··ONFIGS·and·use·f | ||
| 0003fe40:·6 | 0003fe40:·696e·6420·746f·2067·6574·2074·6865·206c··ind·to·get·the·l | ||
| 0003fe50:· | 0003fe50:·6973·7420·6f66·2069·6e63·6c75·6465·6420··ist·of·included· | ||
| 0003fe60:· | 0003fe60:·6669·6c65·732e·0a52·5359·534c·4f47·5f43··files..RSYSLOG_C | ||
| 0003fe70:· | 0003fe70:·4f4e·4649·475f·4649·4c45·533d·2829·0a66··ONFIG_FILES=().f | ||
| 0003fe80:· | 0003fe80:·6f72·2045·4e54·5259·2069·6e20·2224·7b52··or·ENTRY·in·"${R | ||
| 0003fe90:· | 0003fe90:·5359·534c·4f47·5f43·4f4e·4649·4753·5b40··SYSLOG_CONFIGS[@ | ||
| 0003fea0:· | 0003fea0:·5d7d·220a·646f·0a09·2320·4966·2064·6972··]}".do..#·If·dir | ||
| 0003feb0:· | 0003feb0:·6563·746f·7279·2c20·7273·7973·6c6f·6720··ectory,·rsyslog· | ||
| 0003fec0:· | 0003fec0:·7769·6c6c·2073·6561·7263·6820·666f·7220··will·search·for· | ||
| Max diff block lines reached; 926115/1028151 bytes (90.08%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·18.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·18.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 264, 14 lines modified | Offset 264, 139 lines modified | ||
| 264 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 264 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 265 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 265 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 266 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 266 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 267 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 267 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 268 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 268 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 269 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 269 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 272 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 273 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 274 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 275 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 276 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 277 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 278 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 279 | of·IncludeConfig) | ||
| 280 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 281 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 282 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 283 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 284 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 285 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 286 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 287 | '%s\\n'·"${INCPATH}";·done) | ||
| 288 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 289 | declare·-a·LOG_FILE_PATHS | ||
| 290 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 291 | RSYSLOG_CONFIGS=() | ||
| 292 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 293 | {RSYSLOG_INCLUDE[@]}") | ||
| 294 | #·Get·full·list·of·files·to·be·checked | ||
| 295 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 296 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 297 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 298 | included·files. | ||
| 299 | RSYSLOG_CONFIG_FILES=() | ||
| 300 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 301 | do | ||
| 302 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 303 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 304 | » if·[·-d·"${ENTRY}"·] | ||
| 305 | » then | ||
| 306 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 307 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 308 | » elif·[·-f·"${ENTRY}"·] | ||
| 309 | » then | ||
| 310 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 311 | » else | ||
| 312 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 313 | » fi | ||
| 314 | done | ||
| 315 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 316 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 317 | configuration) | ||
| 318 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 319 | do | ||
| 320 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 321 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 322 | ('$')·characters, | ||
| 323 | » #·*·Ignore·empty·lines, | ||
| 324 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 325 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 326 | not·log·files | ||
| 327 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 328 | path | ||
| 329 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 330 | all·of·the | ||
| 331 | » #·following·are·met: | ||
| 332 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 333 | » #·*·it·is·preceded·by·space | ||
| 334 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 335 | characters | ||
| 336 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 337 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 338 | » then | ||
| 339 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 340 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 341 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 342 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 343 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 344 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 345 | {FILTERED_PATHS}") | ||
| 346 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 347 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 348 | newline),·split | ||
| 349 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 350 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 351 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 352 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 353 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 354 | » » #·Delete·the·temporary·array | ||
| 355 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 356 | » fi | ||
| 357 | done | ||
| 358 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 359 | grep·regex·is·a·bit | ||
| 360 | #·curly: | ||
| 361 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 362 | #·extract·File="logfile"·expression | ||
| 363 | #·match·only·"logfile"·expression | ||
| 364 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 365 | do | ||
| 366 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 367 | "${LOG_FILE}") | ||
| 368 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| Max diff block lines reached; 119318/125907 bytes (94.77%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d30:·2d31·3 | 00037d30:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15134, 130 lines modified | Offset 15134, 130 lines modified | ||
| 0003b1d0:·7267·6574·3d22·2369·646d·3237·3336·2220··rget="#idm2736"· | 0003b1d0:·7267·6574·3d22·2369·646d·3237·3336·2220··rget="#idm2736"· | ||
| 0003b1e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b1e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b1f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b1f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b200:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b200:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b210:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b210:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b220:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b220:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b230:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b230:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b240:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b250:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b260:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b270:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b280:·2220·6964·3d22·6964·6d32·3733·3622·3e3c··"·id="idm2736">< | |||
| 0003b290:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b2a0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b2b0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b2c0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b2d0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b2e0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b2f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b300:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b310:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b320:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b330:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b340:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b350:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b360:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b370:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b380:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b390:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b3a0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b3b0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b3c0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b3d0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b3e0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b3f0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b400:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b410:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b420:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b430:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b440:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b450:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b460:·3230·2d30·3130·3435·300a·2020·2d20·4e49··20-010450.··-·NI | |||
| 0003b470:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b480:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b490:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b4a0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b4b0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b4c0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b4d0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b4e0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b4f0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b500:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b510:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b520:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b530:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b540:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b550:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b560:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b570:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b580:·3237·3337·2220·7461·6269·6e64·6578·3d22··2737"·tabindex=" | |||
| 0003b590:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b5a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b5b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b5c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b5d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b5e0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b5f0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b600:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b610:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b620:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b630:·2220·6964·3d22·6964·6d32·3733·3722·3e3c··"·id="idm2737">< | |||
| 0003b640:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b650:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b660:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b670:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b680:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b690:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b6a0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b6b0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b6c0:·7267·6574·3d22·2369·646d·3237·3338·2220··rget="#idm2738"· | |||
| 0003b6d0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b6e0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b6f0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b700:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b710:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b720:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b | 0003b240:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003b | 0003b250:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003b260:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003b270:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003b280:·643d·2269·646d·3237·3336·223e·3c74·6162··d="idm2736"><tab | ||
| 0003b | 0003b290:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b | 0003b2a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b | 0003b2b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b | 0003b2c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b | 0003b2d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b | 0003b2e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b2f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b | 0003b300:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b | 0003b310:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b320:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b | 0003b330:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b | 0003b340:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b | 0003b350:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b360:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003b | 0003b370:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b | 0003b380:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 0003b | 0003b390:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | ||
| 0003b | 0003b3a0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | ||
| 0003b | 0003b3b0:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | ||
| Max diff block lines reached; 5777773/5795629 bytes (99.69%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 133, 14 lines modified | Offset 133, 27 lines modified | ||
| 133 | include·install_aide | 133 | include·install_aide |
| 134 | class·install_aide·{ | 134 | class·install_aide·{ |
| 135 | ··package·{·'aide': | 135 | ··package·{·'aide': |
| 136 | ····ensure·=>·'installed', | 136 | ····ensure·=>·'installed', |
| 137 | ··} | 137 | ··} |
| 138 | } | 138 | } |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 145 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 146 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 147 | else | ||
| 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 149 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | -·name:·Ensure·aide·is·installed | 155 | -·name:·Ensure·aide·is·installed |
| 145 | ··package: | 156 | ··package: |
| Offset 160, 27 lines modified | Offset 173, 14 lines modified | ||
| 160 | ··-·no_reboot_needed | 173 | ··-·no_reboot_needed |
| 161 | ··-·package_aide_installed | 174 | ··-·package_aide_installed |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 163 | [[packages]] | 176 | [[packages]] |
| 164 | name·=·"aide" | 177 | name·=·"aide" |
| 165 | version·=·"*" | 178 | version·=·"*" |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 172 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 173 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 174 | else | ||
| 175 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 176 | fi | ||
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 179 | $·sudo·aideinit | 181 | $·sudo·aideinit |
| 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 181 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 182 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 184 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 183 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 206, 14 lines modified | Offset 206, 40 lines modified | ||
| 206 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 206 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 207 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 207 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 209 | ············_\x8c_\x8i_\x8s············1.4.1 | 209 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 214 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 215 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 216 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 217 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 218 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 219 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 220 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 221 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 222 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 223 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 224 | fi | ||
| 225 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 226 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 227 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 228 | fi | ||
| 229 | /usr/sbin/aideinit·-y·-f | ||
| 230 | else | ||
| 231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 232 | fi | ||
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 218 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 238 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 219 | ··ansible.builtin.apt: | 239 | ··ansible.builtin.apt: |
| Offset 376, 40 lines modified | Offset 402, 14 lines modified | ||
| 376 | ··-·PCI-DSSv4-11.5.2 | 402 | ··-·PCI-DSSv4-11.5.2 |
| 377 | ··-·aide_build_database | 403 | ··-·aide_build_database |
| 378 | ··-·low_complexity | 404 | ··-·low_complexity |
| 379 | ··-·low_disruption | 405 | ··-·low_disruption |
| 380 | ··-·medium_severity | 406 | ··-·medium_severity |
| 381 | ··-·no_reboot_needed | 407 | ··-·no_reboot_needed |
| 382 | ··-·restrict_strategy | 408 | ··-·restrict_strategy |
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 384 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 385 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 386 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 387 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| Max diff block lines reached; 813005/819375 bytes (99.22%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·313 | 00037d40:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15129, 131 lines modified | Offset 15129, 131 lines modified | ||
| 0003b180:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b180:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b190:·743d·2223·6964·6d32·3733·3622·2074·6162··t="#idm2736"·tab | 0003b190:·743d·2223·6964·6d32·3733·3622·2074·6162··t="#idm2736"·tab | ||
| 0003b1a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b1a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b1b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b1b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b1c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b1c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b1d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b1d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b1e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b1e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b1f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b200:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b210:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b220:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b230:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b240:·643d·2269·646d·3237·3336·223e·3c74·6162··d="idm2736"><tab | |||
| 0003b250:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b260:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b270:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b280:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b290:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b2a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b2b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b2c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b2d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b2e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b2f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b300:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b310:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b320:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b330:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b340:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b350:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b360:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b370:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b380:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b390:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b3a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b3b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b3c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b3d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b3e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b3f0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b400:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b410:·5341·2d53·5449·472d·5542·5455·2d32·302d··SA-STIG-UBTU-20- | |||
| 0003b420:·3031·3034·3530·0a20·202d·204e·4953·542d··010450.··-·NIST- | |||
| 0003b430:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b440:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b450:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b460:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b470:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b480:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b490:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b4a0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b4b0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b4c0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b4d0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b4e0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b4f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b500:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b510:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b520:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b530:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | |||
| 0003b540:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | |||
| 0003b550:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b560:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b570:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b580:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b590:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b5a0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b5b0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b5c0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b5d0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b5e0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b5f0:·643d·2269·646d·3237·3337·223e·3c70·7265··d="idm2737"><pre | |||
| 0003b600:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b610:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b620:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b630:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b640:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b650:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b660:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b670:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b680:·743d·2223·6964·6d32·3733·3822·2074·6162··t="#idm2738"·tab | |||
| 0003b690:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b6a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b6b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b6c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b6d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b | 0003b1f0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003b | 0003b200:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 0003b | 0003b210:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b | 0003b220:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b | 0003b230:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b | 0003b240:·6964·6d32·3733·3622·3e3c·7461·626c·6520··idm2736"><table· | ||
| 0003b | 0003b250:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b | 0003b260:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b | 0003b270:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b | 0003b280:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b | 0003b290:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b | 0003b2a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b2b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b2c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b2d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b2e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b2f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b | 0003b300:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b310:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b | 0003b320:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b | 0003b330:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b | 0003b340:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003b | 0003b350:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 0003b | 0003b360:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| Max diff block lines reached; 5624843/5642837 bytes (99.68%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 132, 14 lines modified | Offset 132, 27 lines modified | ||
| 132 | include·install_aide | 132 | include·install_aide |
| 133 | class·install_aide·{ | 133 | class·install_aide·{ |
| 134 | ··package·{·'aide': | 134 | ··package·{·'aide': |
| 135 | ····ensure·=>·'installed', | 135 | ····ensure·=>·'installed', |
| 136 | ··} | 136 | ··} |
| 137 | } | 137 | } |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 144 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 145 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Ensure·aide·is·installed | 154 | -·name:·Ensure·aide·is·installed |
| 144 | ··package: | 155 | ··package: |
| Offset 159, 27 lines modified | Offset 172, 14 lines modified | ||
| 159 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | [[packages]] | 175 | [[packages]] |
| 163 | name·=·"aide" | 176 | name·=·"aide" |
| 164 | version·=·"*" | 177 | version·=·"*" |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 172 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 173 | else | ||
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 175 | fi | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·aideinit | 180 | $·sudo·aideinit |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 181 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 183 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 182 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 184 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 205, 14 lines modified | Offset 205, 40 lines modified | ||
| 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 208 | ············_\x8c_\x8i_\x8s············1.4.1 | 208 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 209 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 209 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 210 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 210 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 213 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 214 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 215 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 216 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 217 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 218 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 219 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 220 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 221 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 222 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 223 | fi | ||
| 224 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 225 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 226 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 227 | fi | ||
| 228 | /usr/sbin/aideinit·-y·-f | ||
| 229 | else | ||
| 230 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 231 | fi | ||
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 233 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 234 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 235 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 236 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 217 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 237 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 218 | ··ansible.builtin.apt: | 238 | ··ansible.builtin.apt: |
| Offset 375, 40 lines modified | Offset 401, 14 lines modified | ||
| 375 | ··-·PCI-DSSv4-11.5.2 | 401 | ··-·PCI-DSSv4-11.5.2 |
| 376 | ··-·aide_build_database | 402 | ··-·aide_build_database |
| 377 | ··-·low_complexity | 403 | ··-·low_complexity |
| 378 | ··-·low_disruption | 404 | ··-·low_disruption |
| 379 | ··-·medium_severity | 405 | ··-·medium_severity |
| 380 | ··-·no_reboot_needed | 406 | ··-·no_reboot_needed |
| 381 | ··-·restrict_strategy | 407 | ··-·restrict_strategy |
| 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 383 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 384 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 385 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 386 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| Max diff block lines reached; 793018/799398 bytes (99.20%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d30:·2d31·3 | 00037d30:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15156, 130 lines modified | Offset 15156, 130 lines modified | ||
| 0003b330:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b330:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b340:·6964·6d32·3733·3622·2074·6162·696e·6465··idm2736"·tabinde | 0003b340:·6964·6d32·3733·3622·2074·6162·696e·6465··idm2736"·tabinde | ||
| 0003b350:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b350:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b360:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b360:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b370:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b370:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b380:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b380:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b390:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b390:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b3a0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b3b0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b3c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b3d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b3e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b3f0:·646d·3237·3336·223e·3c74·6162·6c65·2063··dm2736"><table·c | |||
| 0003b400:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b410:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b420:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b430:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b440:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b450:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b460:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b470:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b480:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b490:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b4a0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b4b0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b4c0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b4d0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b4e0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b4f0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b500:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b510:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b520:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b530:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b540:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b550:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b560:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b570:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b580:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b590:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b5a0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b5b0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b5c0:·5449·472d·5542·5455·2d32·302d·3031·3034··TIG-UBTU-20-0104 | |||
| 0003b5d0:·3530·0a20·202d·204e·4953·542d·3830·302d··50.··-·NIST-800- | |||
| 0003b5e0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b5f0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b600:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b610:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b620:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b630:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b640:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b650:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b660:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b670:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b680:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b690:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b6a0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b6b0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b6c0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b6d0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b6e0:·6765·743d·2223·6964·6d32·3733·3722·2074··get="#idm2737"·t | |||
| 0003b6f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b700:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b710:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b720:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b730:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b740:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b750:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b760:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b770:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b780:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b790:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b7a0:·646d·3237·3337·223e·3c70·7265·3e3c·636f··dm2737"><pre><co | |||
| 0003b7b0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b7c0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b7d0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b7e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b7f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b800:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b810:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b820:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b830:·6964·6d32·3733·3822·2074·6162·696e·6465··idm2738"·tabinde | |||
| 0003b840:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b850:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b860:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b870:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b880:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b | 0003b3a0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003b | 0003b3b0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b | 0003b3c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b3d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b3e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | ||
| 0003b | 0003b3f0:·3733·3622·3e3c·7461·626c·6520·636c·6173··736"><table·clas | ||
| 0003b | 0003b400:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b410:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b420:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b430:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b440:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b450:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b460:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003b470:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b480:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b490:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003b4a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003b4b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003b4c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b | 0003b4d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b | 0003b4e0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 0003b | 0003b4f0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003b | 0003b500:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 0003b | 0003b510:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| Max diff block lines reached; 18833069/18850925 bytes (99.91%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 136, 14 lines modified | Offset 136, 27 lines modified | ||
| 136 | include·install_aide | 136 | include·install_aide |
| 137 | class·install_aide·{ | 137 | class·install_aide·{ |
| 138 | ··package·{·'aide': | 138 | ··package·{·'aide': |
| 139 | ····ensure·=>·'installed', | 139 | ····ensure·=>·'installed', |
| 140 | ··} | 140 | ··} |
| 141 | } | 141 | } |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 148 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 149 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Ensure·aide·is·installed | 158 | -·name:·Ensure·aide·is·installed |
| 148 | ··package: | 159 | ··package: |
| Offset 163, 27 lines modified | Offset 176, 14 lines modified | ||
| 163 | ··-·no_reboot_needed | 176 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 177 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | [[packages]] | 179 | [[packages]] |
| 167 | name·=·"aide" | 180 | name·=·"aide" |
| 168 | version·=·"*" | 181 | version·=·"*" |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 176 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 177 | else | ||
| 178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 179 | fi | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 182 | $·sudo·aideinit | 184 | $·sudo·aideinit |
| 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 185 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 187 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 186 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 188 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 40 lines modified | ||
| 209 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 212 | ············_\x8c_\x8i_\x8s············1.4.1 | 212 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 213 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 214 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 215 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 215 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 219 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 220 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 221 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 222 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 223 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 224 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 225 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 226 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 227 | fi | ||
| 228 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 229 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 230 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 231 | fi | ||
| 232 | /usr/sbin/aideinit·-y·-f | ||
| 233 | else | ||
| 234 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 235 | fi | ||
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 217 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 218 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 219 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 220 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 221 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 241 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 222 | ··ansible.builtin.apt: | 242 | ··ansible.builtin.apt: |
| Offset 379, 40 lines modified | Offset 405, 14 lines modified | ||
| 379 | ··-·PCI-DSSv4-11.5.2 | 405 | ··-·PCI-DSSv4-11.5.2 |
| 380 | ··-·aide_build_database | 406 | ··-·aide_build_database |
| 381 | ··-·low_complexity | 407 | ··-·low_complexity |
| 382 | ··-·low_disruption | 408 | ··-·low_disruption |
| 383 | ··-·medium_severity | 409 | ··-·medium_severity |
| 384 | ··-·no_reboot_needed | 410 | ··-·no_reboot_needed |
| 385 | ··-·restrict_strategy | 411 | ··-·restrict_strategy |
| 386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 387 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 388 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 389 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 390 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| Max diff block lines reached; 1723669/1730039 bytes (99.63%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·313 | 00037d40:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15152, 130 lines modified | Offset 15152, 130 lines modified | ||
| 0003b2f0:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | 0003b2f0:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | ||
| 0003b300:·3733·3622·2074·6162·696e·6465·783d·2230··736"·tabindex="0 | 0003b300:·3733·3622·2074·6162·696e·6465·783d·2230··736"·tabindex="0 | ||
| 0003b310:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b310:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b320:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b320:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b330:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b330:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b340:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b340:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b350:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b350:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b360:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b370:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b380:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b390:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b3a0:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003b3b0:·3336·223e·3c74·6162·6c65·2063·6c61·7373··36"><table·class | |||
| 0003b3c0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b3d0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b3e0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b3f0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b400:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b410:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b420:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b430:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b440:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b450:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b460:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b470:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b480:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b490:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b4a0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b4b0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b4c0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b4d0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b4e0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b4f0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b500:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b510:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b520:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b530:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b540:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b550:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b560:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b570:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b580:·5542·5455·2d32·302d·3031·3034·3530·0a20··UBTU-20-010450.· | |||
| 0003b590:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b5a0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b5b0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b5c0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b5d0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b5e0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b5f0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b600:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b610:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b620:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b630:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b640:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b650:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b660:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b670:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b680:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b690:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b6a0:·2223·6964·6d32·3733·3722·2074·6162·696e··"#idm2737"·tabin | |||
| 0003b6b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b6c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b6d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b6e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b6f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b700:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003b710:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b720:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b730:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b740:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b750:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003b760:·3337·223e·3c70·7265·3e3c·636f·6465·3e0a··37"><pre><code>. | |||
| 0003b770:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b780:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b790:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b7a0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b7b0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b7c0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b7d0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b7e0:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | |||
| 0003b7f0:·3733·3822·2074·6162·696e·6465·783d·2230··738"·tabindex="0 | |||
| 0003b800:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b810:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b820:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b830:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b840:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b | 0003b360:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003b | 0003b370:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b | 0003b380:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b390:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b3a0:·7365·2220·6964·3d22·6964·6d32·3733·3622··se"·id="idm2736" | ||
| 0003b | 0003b3b0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003b3c0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b3d0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b3e0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b3f0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b400:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b410:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b420:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b | 0003b430:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b440:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b450:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003b460:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b470:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003b480:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003b | 0003b490:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b | 0003b4a0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b | 0003b4b0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003b | 0003b4c0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003b | 0003b4d0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| Max diff block lines reached; 18802107/18819963 bytes (99.91%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 135, 14 lines modified | Offset 135, 27 lines modified | ||
| 135 | include·install_aide | 135 | include·install_aide |
| 136 | class·install_aide·{ | 136 | class·install_aide·{ |
| 137 | ··package·{·'aide': | 137 | ··package·{·'aide': |
| 138 | ····ensure·=>·'installed', | 138 | ····ensure·=>·'installed', |
| 139 | ··} | 139 | ··} |
| 140 | } | 140 | } |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 148 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 149 | else | ||
| 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 151 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 146 | -·name:·Ensure·aide·is·installed | 157 | -·name:·Ensure·aide·is·installed |
| 147 | ··package: | 158 | ··package: |
| Offset 162, 27 lines modified | Offset 175, 14 lines modified | ||
| 162 | ··-·no_reboot_needed | 175 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 176 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | [[packages]] | 178 | [[packages]] |
| 166 | name·=·"aide" | 179 | name·=·"aide" |
| 167 | version·=·"*" | 180 | version·=·"*" |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 175 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 176 | else | ||
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 178 | fi | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·aideinit | 183 | $·sudo·aideinit |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 184 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 186 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 185 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 208, 14 lines modified | Offset 208, 40 lines modified | ||
| 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 209 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 209 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 210 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 210 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 211 | ············_\x8c_\x8i_\x8s············1.4.1 | 211 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 218 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 219 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 220 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 221 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 222 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 223 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 224 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 225 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 226 | fi | ||
| 227 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 228 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 229 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 230 | fi | ||
| 231 | /usr/sbin/aideinit·-y·-f | ||
| 232 | else | ||
| 233 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 234 | fi | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 236 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 237 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 238 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 239 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 220 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 240 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 221 | ··ansible.builtin.apt: | 241 | ··ansible.builtin.apt: |
| Offset 378, 40 lines modified | Offset 404, 14 lines modified | ||
| 378 | ··-·PCI-DSSv4-11.5.2 | 404 | ··-·PCI-DSSv4-11.5.2 |
| 379 | ··-·aide_build_database | 405 | ··-·aide_build_database |
| 380 | ··-·low_complexity | 406 | ··-·low_complexity |
| 381 | ··-·low_disruption | 407 | ··-·low_disruption |
| 382 | ··-·medium_severity | 408 | ··-·medium_severity |
| 383 | ··-·no_reboot_needed | 409 | ··-·no_reboot_needed |
| 384 | ··-·restrict_strategy | 410 | ··-·restrict_strategy |
| 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 386 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 387 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 388 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 389 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| Max diff block lines reached; 1714364/1720744 bytes (99.63%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16561, 741 lines modified | Offset 16561, 741 lines modified | ||
| 00040b00:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | 00040b00:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | ||
| 00040b10:·3037·3222·2074·6162·696e·6465·783d·2230··072"·tabindex="0 | 00040b10:·3037·3222·2074·6162·696e·6465·783d·2230··072"·tabindex="0 | ||
| 00040b20:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00040b20:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00040b30:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00040b30:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00040b40:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00040b40:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00040b50:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00040b50:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (727 lines added, 727 lines removed) | |
| 00040b60:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00040b60:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00040b70:·6961·7469·6f6e·20 | 00040b70:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 00040b80:·6 | 00040b80:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 00040b90:· | 00040b90:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 00040ba0:· | 00040ba0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 00040bb0:· | 00040bb0:·7365·2220·6964·3d22·6964·6d31·3130·3732··se"·id="idm11072 | ||
| 00040bc0:·3 | 00040bc0:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | ||
| 00040bd0:· | 00040bd0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 00040be0:·7 | 00040be0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 00040bf0:· | 00040bf0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 00040c00:·6 | 00040c00:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | ||
| 00040c10:·6f6 | 00040c10:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | ||
| 00040c20:· | 00040c20:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | ||
| 00040c30:· | 00040c30:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | ||
| 00040c40:· | 00040c40:·5d3b·2074·6865·6e0a·0a23·204c·6973·7420··];·then..#·List· | ||
| 00040c50:· | 00040c50:·6f66·206c·6f67·2066·696c·6520·7061·7468··of·log·file·path | ||
| 00040c60:·3 | 00040c60:·7320·746f·2062·6520·696e·7370·6563·7465··s·to·be·inspecte | ||
| 00040c70:· | 00040c70:·6420·666f·7220·636f·7272·6563·7420·7065··d·for·correct·pe | ||
| 00040c80:·7 | 00040c80:·726d·6973·7369·6f6e·730a·2320·2a20·5072··rmissions.#·*·Pr | ||
| 00040c90:·6 | 00040c90:·696d·6172·696c·7920·696e·7370·6563·7420··imarily·inspect· | ||
| 00040ca0:·6 | 00040ca0:·6c6f·6720·6669·6c65·2070·6174·6873·206c··log·file·paths·l | ||
| 00040cb0:· | 00040cb0:·6973·7465·6420·696e·202f·6574·632f·7273··isted·in·/etc/rs | ||
| 00040cc0:· | 00040cc0:·7973·6c6f·672e·636f·6e66·0a52·5359·534c··yslog.conf.RSYSL | ||
| 00040cd0:· | 00040cd0:·4f47·5f45·5443·5f43·4f4e·4649·473d·222f··OG_ETC_CONFIG="/ | ||
| 00040ce0:· | 00040ce0:·6574·632f·7273·7973·6c6f·672e·636f·6e66··etc/rsyslog.conf | ||
| 00040cf0:· | 00040cf0:·220a·2320·2a20·416e·6420·616c·736f·2074··".#·*·And·also·t | ||
| 00040d00:· | 00040d00:·6865·206c·6f67·2066·696c·6520·7061·7468··he·log·file·path | ||
| 00040d10:· | 00040d10:·7320·6c69·7374·6564·2061·6674·6572·2072··s·listed·after·r | ||
| 00040d20:· | 00040d20:·7379·736c·6f67·2773·2024·496e·636c·7564··syslog's·$Includ | ||
| 00040d30:·6 | 00040d30:·6543·6f6e·6669·6720·6469·7265·6374·6976··eConfig·directiv | ||
| 00040d40:·6 | 00040d40:·650a·2320·2020·2873·746f·7265·2074·6865··e.#···(store·the | ||
| 00040d50:· | 00040d50:·2072·6573·756c·7420·696e·746f·2061·7272···result·into·arr | ||
| 00040d60:·6 | 00040d60:·6179·2066·6f72·2074·6865·2063·6173·6520··ay·for·the·case· | ||
| 00040d70:· | 00040d70:·7468·6572·6527·7320·7368·656c·6c20·676c··there's·shell·gl | ||
| 00040d80:·6 | 00040d80:·6f62·2075·7365·6420·6173·2076·616c·7565··ob·used·as·value | ||
| 00040d90:· | 00040d90:·206f·6620·496e·636c·7564·6543·6f6e·6669···of·IncludeConfi | ||
| 00040da0:·6 | 00040da0:·6729·0a72·6561·6461·7272·6179·202d·7420··g).readarray·-t· | ||
| 00040db0:· | 00040db0:·4f4c·445f·494e·4320·266c·743b·2026·6c74··OLD_INC·<·< | ||
| 00040dc0:· | 00040dc0:·3b28·6772·6570·202d·6520·225c·2449·6e63··;(grep·-e·"\$Inc | ||
| 00040dd0:·6 | 00040dd0:·6c75·6465·436f·6e66·6967·5b5b·3a73·7061··ludeConfig[[:spa | ||
| 00040de0:· | 00040de0:·6365·3a5d·5d5c·2b5b·5e5b·3a73·7061·6365··ce:]]\+[^[:space | ||
| 00040df0:· | 00040df0:·3a5d·3b5d·5c2b·2220·2f65·7463·2f72·7379··:];]\+"·/etc/rsy | ||
| 00040e00:·36 | 00040e00:·736c·6f67·2e63·6f6e·6620·7c20·6375·7420··slog.conf·|·cut· | ||
| 00040e10:·2d | 00040e10:·2d64·2027·2027·202d·6620·3229·0a72·6561··-d·'·'·-f·2).rea | ||
| 00040e20:· | 00040e20:·6461·7272·6179·202d·7420·5253·5953·4c4f··darray·-t·RSYSLO | ||
| 00040e30:· | 00040e30:·475f·494e·434c·5544·455f·434f·4e46·4947··G_INCLUDE_CONFIG | ||
| 00040e40:·2 | 00040e40:·2026·6c74·3b20·266c·743b·2866·6f72·2049···<·<(for·I | ||
| 00040e50:· | 00040e50:·4e43·5041·5448·2069·6e20·2224·7b4f·4c44··NCPATH·in·"${OLD | ||
| 00040e60:· | 00040e60:·5f49·4e43·5b40·5d7d·223b·2064·6f20·6576··_INC[@]}";·do·ev | ||
| 00040e70:· | 00040e70:·616c·2070·7269·6e74·6620·2725·735c·5c6e··al·printf·'%s\\n | ||
| 00040e80:·72 | 00040e80:·2720·2224·7b49·4e43·5041·5448·7d22·3b20··'·"${INCPATH}";· | ||
| 00040e90:· | 00040e90:·646f·6e65·290a·7265·6164·6172·7261·7920··done).readarray· | ||
| 00040ea0:· | 00040ea0:·2d74·204e·4557·5f49·4e43·2026·6c74·3b20··-t·NEW_INC·<· | ||
| 00040eb0:· | 00040eb0:·266c·743b·2873·6564·202d·6e20·272f·5e5c··<(sed·-n·'/^\ | ||
| 00040ec0:· | 00040ec0:·732a·696e·636c·7564·6528·2f2c·2f29·2f49··s*include(/,/)/I | ||
| 00040ed0:·70 | 00040ed0:·7027·202f·6574·632f·7273·7973·6c6f·672e··p'·/etc/rsyslog. | ||
| 00040ee0:·6 | 00040ee0:·636f·6e66·207c·2073·6564·202d·6e20·2773··conf·|·sed·-n·'s | ||
| 00040ef0:·4 | 00040ef0:·402e·2a66·696c·655c·732a·3d5c·732a·225c··@.*file\s*=\s*"\ | ||
| 00040f00:· | 00040f00:·285b·2f5b·3a61·6c6e·756d·3a5d·5b3a·7075··([/[:alnum:][:pu | ||
| 00040f10:· | 00040f10:·6e63·743a·5d5d·2a5c·2922·2e2a·405c·3140··nct:]]*\)".*@\1@ | ||
| 00040f20:· | 00040f20:·4970·2729·0a72·6561·6461·7272·6179·202d··Ip').readarray·- | ||
| 00040f30:· | 00040f30:·7420·5253·5953·4c4f·475f·494e·434c·5544··t·RSYSLOG_INCLUD | ||
| 00040f40:· | 00040f40:·4520·266c·743b·2026·6c74·3b28·666f·7220··E·<·<(for· | ||
| 00040f50:· | 00040f50:·494e·4350·4154·4820·696e·2022·247b·4e45··INCPATH·in·"${NE | ||
| 00040f60:· | 00040f60:·575f·494e·435b·405d·7d22·3b20·646f·2065··W_INC[@]}";·do·e | ||
| 00040f70:· | 00040f70:·7661·6c20·7072·696e·7466·2027·2573·5c5c··val·printf·'%s\\ | ||
| 00040f80:·6 | 00040f80:·6e27·2022·247b·494e·4350·4154·487d·223b··n'·"${INCPATH}"; | ||
| 00040f90:· | 00040f90:·2064·6f6e·6529·0a0a·2320·4465·636c·6172···done)..#·Declar | ||
| 00040fa0:· | 00040fa0:·6520·616e·2061·7272·6179·2074·6f20·686f··e·an·array·to·ho | ||
| 00040fb0:·6 | 00040fb0:·6c64·2074·6865·2066·696e·616c·206c·6973··ld·the·final·lis | ||
| 00040fc0:· | 00040fc0:·7420·6f66·2064·6966·6665·7265·6e74·206c··t·of·different·l | ||
| 00040fd0:·6 | 00040fd0:·6f67·2066·696c·6520·7061·7468·730a·6465··og·file·paths.de | ||
| 00040fe0:· | 00040fe0:·636c·6172·6520·2d61·204c·4f47·5f46·494c··clare·-a·LOG_FIL | ||
| 00040ff0:· | 00040ff0:·455f·5041·5448·530a·0a23·2041·7272·6179··E_PATHS..#·Array | ||
| 00041000:· | 00041000:·2074·6f20·686f·6c64·2061·6c6c·2072·7379···to·hold·all·rsy | ||
| 00041010:· | 00041010:·736c·6f67·2063·6f6e·6669·6720·656e·7472··slog·config·entr | ||
| 00041020:· | 00041020:·6965·730a·5253·5953·4c4f·475f·434f·4e46··ies.RSYSLOG_CONF | ||
| 00041030:· | 00041030:·4947·533d·2829·0a52·5359·534c·4f47·5f43··IGS=().RSYSLOG_C | ||
| 00041040:· | 00041040:·4f4e·4649·4753·3d28·2224·7b52·5359·534c··ONFIGS=("${RSYSL | ||
| 00041050:·4 | 00041050:·4f47·5f45·5443·5f43·4f4e·4649·477d·2220··OG_ETC_CONFIG}"· | ||
| 00041060:·2 | 00041060:·2224·7b52·5359·534c·4f47·5f49·4e43·4c55··"${RSYSLOG_INCLU | ||
| 00041070:· | 00041070:·4445·5f43·4f4e·4649·475b·405d·7d22·2022··DE_CONFIG[@]}"·" | ||
| 00041080:· | 00041080:·247b·5253·5953·4c4f·475f·494e·434c·5544··${RSYSLOG_INCLUD | ||
| 00041090:· | 00041090:·455b·405d·7d22·290a·0a23·2047·6574·2066··E[@]}")..#·Get·f | ||
| 000410a0:· | 000410a0:·756c·6c20·6c69·7374·206f·6620·6669·6c65··ull·list·of·file | ||
| 000410b0:· | 000410b0:·7320·746f·2062·6520·6368·6563·6b65·640a··s·to·be·checked. | ||
| 000410c0:· | 000410c0:·2320·5253·5953·4c4f·475f·434f·4e46·4947··#·RSYSLOG_CONFIG | ||
| 000410d0:· | 000410d0:·5320·6d61·7920·636f·6e74·6169·6e20·676c··S·may·contain·gl | ||
| 000410e0:· | 000410e0:·6f62·7320·7375·6368·2061·730a·2320·2f65··obs·such·as.#·/e | ||
| 000410f0:· | 000410f0:·7463·2f72·7379·736c·6f67·2e64·2f2a·2e63··tc/rsyslog.d/*.c | ||
| 00041100:· | 00041100:·6f6e·6620·2f65·7463·2f72·7379·736c·6f67··onf·/etc/rsyslog | ||
| 00041110:· | 00041110:·2e64·2f2a·2e66·7275·6c65·0a23·2053·6f2c··.d/*.frule.#·So, | ||
| 00041120:· | 00041120:·206c·6f6f·7020·6f76·6572·2074·6865·2065···loop·over·the·e | ||
| 00041130:·6 | 00041130:·6e74·7269·6573·2069·6e20·5253·5953·4c4f··ntries·in·RSYSLO | ||
| 00041140:· | 00041140:·475f·434f·4e46·4947·5320·616e·6420·7573··G_CONFIGS·and·us | ||
| 00041150:· | 00041150:·6520·6669·6e64·2074·6f20·6765·7420·7468··e·find·to·get·th | ||
| 00041160:· | 00041160:·6520·6c69·7374·206f·6620·696e·636c·7564··e·list·of·includ | ||
| 00041170:· | 00041170:·6564·2066·696c·6573·2e0a·5253·5953·4c4f··ed·files..RSYSLO | ||
| 00041180:·75 | 00041180:·475f·434f·4e46·4947·5f46·494c·4553·3d28··G_CONFIG_FILES=( | ||
| 00041190:· | 00041190:·290a·666f·7220·454e·5452·5920·696e·2022··).for·ENTRY·in·" | ||
| 000411a0:· | 000411a0:·247b·5253·5953·4c4f·475f·434f·4e46·4947··${RSYSLOG_CONFIG | ||
| 000411b0:· | 000411b0:·535b·405d·7d22·0a64·6f0a·0923·2049·6620··S[@]}".do..#·If· | ||
| 000411c0:·6 | 000411c0:·6469·7265·6374·6f72·792c·2072·7379·736c··directory,·rsysl | ||
| 000411d0:· | 000411d0:·6f67·2077·696c·6c20·7365·6172·6368·2066··og·will·search·f | ||
| Max diff block lines reached; 978210/1080246 bytes (90.55%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·20.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·20.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 289, 14 lines modified | Offset 289, 137 lines modified | ||
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP-007- | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP-007- |
| 290 | ···························3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 290 | ···························3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 299 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 300 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 301 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 302 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 303 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value·of | ||
| 304 | IncludeConfig) | ||
| 305 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+"·/ | ||
| 306 | etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 307 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 308 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 309 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed·- | ||
| 310 | n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 311 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 312 | '%s\\n'·"${INCPATH}";·done) | ||
| 313 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 314 | declare·-a·LOG_FILE_PATHS | ||
| 315 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 316 | RSYSLOG_CONFIGS=() | ||
| 317 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 318 | {RSYSLOG_INCLUDE[@]}") | ||
| 319 | #·Get·full·list·of·files·to·be·checked | ||
| 320 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 321 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 322 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 323 | included·files. | ||
| 324 | RSYSLOG_CONFIG_FILES=() | ||
| 325 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 326 | do | ||
| 327 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 328 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 329 | » if·[·-d·"${ENTRY}"·] | ||
| 330 | » then | ||
| 331 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 332 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 333 | » elif·[·-f·"${ENTRY}"·] | ||
| 334 | » then | ||
| 335 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 336 | » else | ||
| 337 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 338 | » fi | ||
| 339 | done | ||
| 340 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 341 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default·configuration) | ||
| 342 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 343 | do | ||
| 344 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 345 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 346 | ('$')·characters, | ||
| 347 | » #·*·Ignore·empty·lines, | ||
| 348 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 349 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 350 | not·log·files | ||
| 351 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 352 | path | ||
| 353 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if·all | ||
| 354 | of·the | ||
| 355 | » #·following·are·met: | ||
| 356 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 357 | » #·*·it·is·preceded·by·space | ||
| 358 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';')·characters | ||
| 359 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 360 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 361 | » then | ||
| 362 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 363 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 364 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 365 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 366 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 367 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 368 | {FILTERED_PATHS}") | ||
| 369 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 370 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 371 | newline),·split | ||
| 372 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 373 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 374 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 375 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 376 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 377 | » » #·Delete·the·temporary·array | ||
| 378 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 379 | » fi | ||
| 380 | done | ||
| 381 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so·grep | ||
| 382 | regex·is·a·bit | ||
| 383 | #·curly: | ||
| 384 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 385 | #·extract·File="logfile"·expression | ||
| 386 | #·match·only·"logfile"·expression | ||
| 387 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 388 | do | ||
| 389 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 390 | "${LOG_FILE}") | ||
| 391 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 392 | alnum:][:punct:]]*)\"\s*\)") | ||
| 393 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| Max diff block lines reached; 124351/130957 bytes (94.96%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d90:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037da0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037da0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037db0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037db0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037dc0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037dc0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037dd0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037dd0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037de0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037de0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037df0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e00:·6f66·2032·3032·3 | 00037e00:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 00037e10:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037e10:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e20:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e20:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e30:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e30:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e40:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e40:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e50:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e50:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e60:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e60:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e70:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e70:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15111, 130 lines modified | Offset 15111, 130 lines modified | ||
| 0003b060:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | 0003b060:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | ||
| 0003b070:·3336·2220·7461·6269·6e64·6578·3d22·3022··36"·tabindex="0" | 0003b070:·3336·2220·7461·6269·6e64·6578·3d22·3022··36"·tabindex="0" | ||
| 0003b080:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b080:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b090:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b090:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b0a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b0a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b0b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b0b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b0c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b0c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b0d0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b0e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b0f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b100:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b110:·6170·7365·2220·6964·3d22·6964·6d32·3733··apse"·id="idm273 | |||
| 0003b120:·3622·3e3c·7461·626c·6520·636c·6173·733d··6"><table·class= | |||
| 0003b130:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b140:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b150:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b160:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b170:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b180:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b190:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b1a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b1b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b1c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b1d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b1e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b1f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b200:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b210:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b220:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b230:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b240:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b250:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b260:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b270:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b280:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b290:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b2a0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b2b0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b2c0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b2d0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b2e0:·0a20·202d·2044·4953·412d·5354·4947·2d55··.··-·DISA-STIG-U | |||
| 0003b2f0:·4254·552d·3230·2d30·3130·3435·300a·2020··BTU-20-010450.·· | |||
| 0003b300:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b310:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b320:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b330:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b340:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b350:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b360:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b370:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b380:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b390:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b3a0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b3b0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b3c0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b3d0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b3e0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b3f0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b400:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b410:·2369·646d·3237·3337·2220·7461·6269·6e64··#idm2737"·tabind | |||
| 0003b420:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b430:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b440:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b450:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b460:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b470:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b480:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b490:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b4a0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4b0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4c0:·6170·7365·2220·6964·3d22·6964·6d32·3733··apse"·id="idm273 | |||
| 0003b4d0:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | |||
| 0003b4e0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b4f0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b500:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b510:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b520:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b530:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b540:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b550:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | |||
| 0003b560:·3338·2220·7461·6269·6e64·6578·3d22·3022··38"·tabindex="0" | |||
| 0003b570:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b580:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b590:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b5a0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b5b0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b | 0003b0d0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | ||
| 0003b | 0003b0e0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003b | 0003b0f0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b | 0003b100:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b | 0003b110:·6522·2069·643d·2269·646d·3237·3336·223e··e"·id="idm2736"> | ||
| 0003b | 0003b120:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b | 0003b130:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b | 0003b140:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b | 0003b150:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b | 0003b160:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003b | 0003b170:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b180:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003b190:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b | 0003b1a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b1b0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b | 0003b1c0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b | 0003b1d0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b1e0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b | 0003b1f0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b | 0003b200:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003b210:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0003b | 0003b220:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 0003b | 0003b230:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 0003b | 0003b240:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 0003b | 0003b250:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | ||
| Max diff block lines reached; 17019846/17037564 bytes (99.90%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation |
| 42 | ··············Guide·(STIG)·V1R11 | 42 | ··············Guide·(STIG)·V1R11 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 45 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 126, 14 lines modified | Offset 126, 27 lines modified | ||
| 126 | include·install_aide | 126 | include·install_aide |
| 127 | class·install_aide·{ | 127 | class·install_aide·{ |
| 128 | ··package·{·'aide': | 128 | ··package·{·'aide': |
| 129 | ····ensure·=>·'installed', | 129 | ····ensure·=>·'installed', |
| 130 | ··} | 130 | ··} |
| 131 | } | 131 | } |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 139 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 140 | else | ||
| 141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 142 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 148 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 149 | ··package: |
| Offset 153, 27 lines modified | Offset 166, 14 lines modified | ||
| 153 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | [[packages]] | 169 | [[packages]] |
| 157 | name·=·"aide" | 170 | name·=·"aide" |
| 158 | version·=·"*" | 171 | version·=·"*" |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 166 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 171 | Run·the·following·command·to·generate·a·new·database: | 173 | Run·the·following·command·to·generate·a·new·database: |
| 172 | $·sudo·aideinit | 174 | $·sudo·aideinit |
| 173 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 175 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 174 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a | 176 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a |
| 175 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 177 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 176 | newly-generated·database·can·be·installed·as·follows: | 178 | newly-generated·database·can·be·installed·as·follows: |
| Offset 199, 14 lines modified | Offset 199, 40 lines modified | ||
| 199 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 199 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 200 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 200 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 201 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 201 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 202 | ············_\x8c_\x8i_\x8s············1.4.1 | 202 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 203 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 203 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 204 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 204 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 205 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 205 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 207 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 208 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 209 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 210 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 211 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 212 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 213 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 214 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 215 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 216 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 217 | fi | ||
| 218 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 219 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 220 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 221 | fi | ||
| 222 | /usr/sbin/aideinit·-y·-f | ||
| 223 | else | ||
| 224 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 225 | fi | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 211 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 231 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 212 | ··ansible.builtin.apt: | 232 | ··ansible.builtin.apt: |
| Offset 369, 40 lines modified | Offset 395, 14 lines modified | ||
| 369 | ··-·PCI-DSSv4-11.5.2 | 395 | ··-·PCI-DSSv4-11.5.2 |
| 370 | ··-·aide_build_database | 396 | ··-·aide_build_database |
| 371 | ··-·low_complexity | 397 | ··-·low_complexity |
| 372 | ··-·low_disruption | 398 | ··-·low_disruption |
| 373 | ··-·medium_severity | 399 | ··-·medium_severity |
| 374 | ··-·no_reboot_needed | 400 | ··-·no_reboot_needed |
| 375 | ··-·restrict_strategy | 401 | ··-·restrict_strategy |
| 376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 377 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 378 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 379 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 380 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| Max diff block lines reached; 1183573/1189902 bytes (99.47%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d30:·2d31·3 | 00037d30:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15146, 131 lines modified | Offset 15146, 131 lines modified | ||
| 0003b290:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b290:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b2a0:·2223·6964·6d32·3930·3322·2074·6162·696e··"#idm2903"·tabin | 0003b2a0:·2223·6964·6d32·3930·3322·2074·6162·696e··"#idm2903"·tabin | ||
| 0003b2b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b2b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b2c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b2c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b2d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b2d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b2e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b2e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b2f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b2f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b300:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b310:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b320:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b330:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b340:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b350:·2269·646d·3239·3033·223e·3c74·6162·6c65··"idm2903"><table | |||
| 0003b360:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b370:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b380:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b390:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b3a0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b3b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b3c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b3d0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b3e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b3f0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b400:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b410:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b420:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b430:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b440:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b450:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b460:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b470:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b480:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b490:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b4a0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b4b0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b4c0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b4d0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b4e0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b4f0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b500:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b510:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b520:·2d53·5449·472d·5542·5455·2d32·322d·3635··-STIG-UBTU-22-65 | |||
| 0003b530:·3130·3130·0a20·202d·204e·4953·542d·3830··1010.··-·NIST-80 | |||
| 0003b540:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b550:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b560:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b570:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b580:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b590:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b5a0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b5b0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b5c0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b5d0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b5e0:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b5f0:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b600:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b610:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b620:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b630:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b640:·6172·6765·743d·2223·6964·6d32·3930·3422··arget="#idm2904" | |||
| 0003b650:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b660:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b670:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b680:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b690:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b6a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b6b0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b6c0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b6d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b6e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b6f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b700:·2269·646d·3239·3034·223e·3c70·7265·3e3c··"idm2904"><pre>< | |||
| 0003b710:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b720:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b730:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b740:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b750:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b760:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b770:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b780:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b790:·2223·6964·6d32·3930·3522·2074·6162·696e··"#idm2905"·tabin | |||
| 0003b7a0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b7b0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b7c0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b7d0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b7e0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003b300:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b | 0003b310:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b | 0003b320:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b330:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b340:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003b350:·6d32·3930·3322·3e3c·7461·626c·6520·636c··m2903"><table·cl | ||
| 0003b | 0003b360:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003b370:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003b380:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003b390:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003b3a0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003b3b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003b3c0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003b3d0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b3e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003b3f0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b | 0003b400:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b | 0003b410:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003b420:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b | 0003b430:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b | 0003b440:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | ||
| 0003b | 0003b450:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003b | 0003b460:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 0003b | 0003b470:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| Max diff block lines reached; 7381284/7399278 bytes (99.76%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 135, 14 lines modified | Offset 135, 27 lines modified | ||
| 135 | include·install_aide | 135 | include·install_aide |
| 136 | class·install_aide·{ | 136 | class·install_aide·{ |
| 137 | ··package·{·'aide': | 137 | ··package·{·'aide': |
| 138 | ····ensure·=>·'installed', | 138 | ····ensure·=>·'installed', |
| 139 | ··} | 139 | ··} |
| 140 | } | 140 | } |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 148 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 149 | else | ||
| 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 151 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 146 | -·name:·Ensure·aide·is·installed | 157 | -·name:·Ensure·aide·is·installed |
| 147 | ··package: | 158 | ··package: |
| Offset 162, 27 lines modified | Offset 175, 14 lines modified | ||
| 162 | ··-·no_reboot_needed | 175 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 176 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | [[packages]] | 178 | [[packages]] |
| 166 | name·=·"aide" | 179 | name·=·"aide" |
| 167 | version·=·"*" | 180 | version·=·"*" |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 175 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 176 | else | ||
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 178 | fi | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·aideinit | 183 | $·sudo·aideinit |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 207, 14 lines modified | Offset 207, 40 lines modified | ||
| 207 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 207 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 209 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 209 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 210 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 210 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 211 | ············_\x8c_\x8i_\x8s············1.3.1 | 211 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 215 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 216 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 217 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 218 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 219 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 220 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 221 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 222 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 223 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 224 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 225 | fi | ||
| 226 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 227 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 228 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 229 | fi | ||
| 230 | /usr/sbin/aideinit·-y·-f | ||
| 231 | else | ||
| 232 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 233 | fi | ||
| 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 219 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 239 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 220 | ··ansible.builtin.apt: | 240 | ··ansible.builtin.apt: |
| Offset 377, 40 lines modified | Offset 403, 14 lines modified | ||
| 377 | ··-·PCI-DSSv4-11.5.2 | 403 | ··-·PCI-DSSv4-11.5.2 |
| 378 | ··-·aide_build_database | 404 | ··-·aide_build_database |
| 379 | ··-·low_complexity | 405 | ··-·low_complexity |
| 380 | ··-·low_disruption | 406 | ··-·low_disruption |
| 381 | ··-·medium_severity | 407 | ··-·medium_severity |
| 382 | ··-·no_reboot_needed | 408 | ··-·no_reboot_needed |
| 383 | ··-·restrict_strategy | 409 | ··-·restrict_strategy |
| 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 385 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 386 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 387 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 388 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| Max diff block lines reached; 914852/921264 bytes (99.30%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·313 | 00037d40:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15137, 130 lines modified | Offset 15137, 130 lines modified | ||
| 0003b200:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | 0003b200:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | ||
| 0003b210:·3930·3322·2074·6162·696e·6465·783d·2230··903"·tabindex="0 | 0003b210:·3930·3322·2074·6162·696e·6465·783d·2230··903"·tabindex="0 | ||
| 0003b220:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b220:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b230:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b230:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b240:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b240:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b250:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b250:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b260:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b260:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b270:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b280:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b290:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b2a0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b2b0:·6c61·7073·6522·2069·643d·2269·646d·3239··lapse"·id="idm29 | |||
| 0003b2c0:·3033·223e·3c74·6162·6c65·2063·6c61·7373··03"><table·class | |||
| 0003b2d0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b2e0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b2f0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b300:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b310:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b320:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b330:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b340:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b350:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b360:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b370:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b380:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b390:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b3a0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b3b0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b3c0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b3d0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b3e0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b3f0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b400:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b410:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b420:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b430:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b440:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b450:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b460:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b470:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b480:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b490:·5542·5455·2d32·322d·3635·3130·3130·0a20··UBTU-22-651010.· | |||
| 0003b4a0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b4b0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b4c0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b4d0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b4e0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b4f0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b500:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b510:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b520:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b530:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b540:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b550:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b560:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b570:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b580:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b590:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b5a0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b5b0:·2223·6964·6d32·3930·3422·2074·6162·696e··"#idm2904"·tabin | |||
| 0003b5c0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b5d0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b5e0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b5f0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b600:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b610:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003b620:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b630:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b640:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b650:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b660:·6c61·7073·6522·2069·643d·2269·646d·3239··lapse"·id="idm29 | |||
| 0003b670:·3034·223e·3c70·7265·3e3c·636f·6465·3e0a··04"><pre><code>. | |||
| 0003b680:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b690:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b6a0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b6b0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b6c0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b6d0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b6e0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b6f0:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | |||
| 0003b700:·3930·3522·2074·6162·696e·6465·783d·2230··905"·tabindex="0 | |||
| 0003b710:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b720:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b730:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b740:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b750:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b | 0003b270:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003b | 0003b280:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b | 0003b290:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b2a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b2b0:·7365·2220·6964·3d22·6964·6d32·3930·3322··se"·id="idm2903" | ||
| 0003b | 0003b2c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003b2d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b2e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b2f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b300:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b310:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b320:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b330:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b | 0003b340:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b350:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b360:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003b370:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b380:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003b390:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003b | 0003b3a0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b | 0003b3b0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b | 0003b3c0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003b | 0003b3d0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003b | 0003b3e0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| Max diff block lines reached; 7232062/7249918 bytes (99.75%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 133, 14 lines modified | Offset 133, 27 lines modified | ||
| 133 | include·install_aide | 133 | include·install_aide |
| 134 | class·install_aide·{ | 134 | class·install_aide·{ |
| 135 | ··package·{·'aide': | 135 | ··package·{·'aide': |
| 136 | ····ensure·=>·'installed', | 136 | ····ensure·=>·'installed', |
| 137 | ··} | 137 | ··} |
| 138 | } | 138 | } |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 145 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 146 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 147 | else | ||
| 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 149 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | -·name:·Ensure·aide·is·installed | 155 | -·name:·Ensure·aide·is·installed |
| 145 | ··package: | 156 | ··package: |
| Offset 160, 27 lines modified | Offset 173, 14 lines modified | ||
| 160 | ··-·no_reboot_needed | 173 | ··-·no_reboot_needed |
| 161 | ··-·package_aide_installed | 174 | ··-·package_aide_installed |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 163 | [[packages]] | 176 | [[packages]] |
| 164 | name·=·"aide" | 177 | name·=·"aide" |
| 165 | version·=·"*" | 178 | version·=·"*" |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 172 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 173 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 174 | else | ||
| 175 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 176 | fi | ||
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 179 | $·sudo·aideinit | 181 | $·sudo·aideinit |
| 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 181 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 182 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 183 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 205, 14 lines modified | Offset 205, 40 lines modified | ||
| 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 206 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 206 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 207 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 207 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 209 | ············_\x8c_\x8i_\x8s············1.3.1 | 209 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 213 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 214 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 215 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 216 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 217 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 218 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 219 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 220 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 221 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 222 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 223 | fi | ||
| 224 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 225 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 226 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 227 | fi | ||
| 228 | /usr/sbin/aideinit·-y·-f | ||
| 229 | else | ||
| 230 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 231 | fi | ||
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 233 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 234 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 235 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 236 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 217 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 237 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 218 | ··ansible.builtin.apt: | 238 | ··ansible.builtin.apt: |
| Offset 375, 40 lines modified | Offset 401, 14 lines modified | ||
| 375 | ··-·PCI-DSSv4-11.5.2 | 401 | ··-·PCI-DSSv4-11.5.2 |
| 376 | ··-·aide_build_database | 402 | ··-·aide_build_database |
| 377 | ··-·low_complexity | 403 | ··-·low_complexity |
| 378 | ··-·low_disruption | 404 | ··-·low_disruption |
| 379 | ··-·medium_severity | 405 | ··-·medium_severity |
| 380 | ··-·no_reboot_needed | 406 | ··-·no_reboot_needed |
| 381 | ··-·restrict_strategy | 407 | ··-·restrict_strategy |
| 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 383 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 384 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 385 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 386 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| Max diff block lines reached; 899549/905971 bytes (99.29%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d30:·2d31·3 | 00037d30:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15154, 130 lines modified | Offset 15154, 130 lines modified | ||
| 0003b310:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | 0003b310:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | ||
| 0003b320:·3930·3322·2074·6162·696e·6465·783d·2230··903"·tabindex="0 | 0003b320:·3930·3322·2074·6162·696e·6465·783d·2230··903"·tabindex="0 | ||
| 0003b330:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b330:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b340:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b340:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b350:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b350:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b360:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b360:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b370:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b370:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b380:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b390:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b3a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b3b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b3c0:·6c61·7073·6522·2069·643d·2269·646d·3239··lapse"·id="idm29 | |||
| 0003b3d0:·3033·223e·3c74·6162·6c65·2063·6c61·7373··03"><table·class | |||
| 0003b3e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b3f0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b400:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b410:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b420:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b430:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b440:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b450:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b460:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b470:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b480:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b490:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b4a0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b4b0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b4c0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b4d0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b4e0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b4f0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b500:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b510:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b520:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b530:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b540:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b550:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b560:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b570:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b580:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b590:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b5a0:·5542·5455·2d32·322d·3635·3130·3130·0a20··UBTU-22-651010.· | |||
| 0003b5b0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b5c0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b5d0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b5e0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b5f0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b600:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b610:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b620:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b630:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b640:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b650:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b660:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b670:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b680:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b690:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b6a0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b6b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b6c0:·2223·6964·6d32·3930·3422·2074·6162·696e··"#idm2904"·tabin | |||
| 0003b6d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b6e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b6f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b700:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b710:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b720:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003b730:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b740:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b750:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b760:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b770:·6c61·7073·6522·2069·643d·2269·646d·3239··lapse"·id="idm29 | |||
| 0003b780:·3034·223e·3c70·7265·3e3c·636f·6465·3e0a··04"><pre><code>. | |||
| 0003b790:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b7a0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b7b0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b7c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b7d0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b7e0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b7f0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b800:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | |||
| 0003b810:·3930·3522·2074·6162·696e·6465·783d·2230··905"·tabindex="0 | |||
| 0003b820:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b830:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b840:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b850:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b860:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b | 0003b380:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003b | 0003b390:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b | 0003b3a0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b3b0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b3c0:·7365·2220·6964·3d22·6964·6d32·3930·3322··se"·id="idm2903" | ||
| 0003b | 0003b3d0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003b3e0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b3f0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b400:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b410:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b420:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b430:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b440:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b | 0003b450:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b460:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b470:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003b480:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b490:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003b4a0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003b | 0003b4b0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b | 0003b4c0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b | 0003b4d0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003b | 0003b4e0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003b | 0003b4f0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| Max diff block lines reached; 21415404/21433260 bytes (99.92%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·313 | 00037d40:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15150, 130 lines modified | Offset 15150, 130 lines modified | ||
| 0003b2d0:·6172·6765·743d·2223·6964·6d32·3930·3322··arget="#idm2903" | 0003b2d0:·6172·6765·743d·2223·6964·6d32·3930·3322··arget="#idm2903" | ||
| 0003b2e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b2e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b2f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b2f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b300:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b300:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b310:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b310:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b320:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b320:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b330:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b330:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b340:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b350:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b360:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b370:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b380:·6522·2069·643d·2269·646d·3239·3033·223e··e"·id="idm2903"> | |||
| 0003b390:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b3a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b3b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b3c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b3d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b3e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b3f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b400:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b410:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b420:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b430:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b440:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b450:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b460:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b470:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b480:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b490:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b4a0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b4b0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b4c0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b4d0:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003b4e0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b4f0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b500:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b510:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b520:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b530:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003b540:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b550:·2d20·4449·5341·2d53·5449·472d·5542·5455··-·DISA-STIG-UBTU | |||
| 0003b560:·2d32·322d·3635·3130·3130·0a20·202d·204e··-22-651010.··-·N | |||
| 0003b570:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b580:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b590:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b5a0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b5b0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b5c0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b5d0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b5e0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b5f0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b600:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b610:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b620:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b630:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b640:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b650:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b660:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b670:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b680:·6d32·3930·3422·2074·6162·696e·6465·783d··m2904"·tabindex= | |||
| 0003b690:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b6a0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b6b0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b6c0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b6d0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b6e0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b6f0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b700:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b710:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b720:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b730:·6522·2069·643d·2269·646d·3239·3034·223e··e"·id="idm2904"> | |||
| 0003b740:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b750:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b760:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b770:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b780:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b790:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b7a0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b7b0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b7c0:·6172·6765·743d·2223·6964·6d32·3930·3522··arget="#idm2905" | |||
| 0003b7d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b7e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b7f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b800:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b810:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b820:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b | 0003b340:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | ||
| 0003b | 0003b350:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b360:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b370:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b380:·6964·3d22·6964·6d32·3930·3322·3e3c·7461··id="idm2903"><ta | ||
| 0003b | 0003b390:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003b3a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003b3b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003b3c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003b3d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003b3e0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b8e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b8f0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b900:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b910:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b920:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b | 0003b3f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b400:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b410:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b420:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b430:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b440:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003b450:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003b460:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| Max diff block lines reached; 21385607/21403463 bytes (99.92%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16538, 741 lines modified | Offset 16538, 741 lines modified | ||
| 00040990:·743d·2223·6964·6d31·3135·3337·2220·7461··t="#idm11537"·ta | 00040990:·743d·2223·6964·6d31·3135·3337·2220·7461··t="#idm11537"·ta | ||
| 000409a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 000409a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 000409b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 000409b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 000409c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 000409c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 000409d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 000409d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 000409e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 000409e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (727 lines added, 727 lines removed) | |
| 000409f0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 000409f0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00040a00:· | 00040a00:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 00040a10:· | 00040a10:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 00040a20:· | 00040a20:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 00040a30:· | 00040a30:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 00040a40:· | 00040a40:·2269·646d·3131·3533·3722·3e3c·7072·653e··"idm11537"><pre> | ||
| 00040a50:· | 00040a50:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 00040a60:·6 | 00040a60:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 00040a70:· | 00040a70:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 00040a80:·6 | 00040a80:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | ||
| 00040a90:· | 00040a90:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | ||
| 00040aa0:·7 | 00040aa0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | ||
| 00040ab0:·2 | 00040ab0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | ||
| 00040ac0:· | 00040ac0:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | ||
| 00040ad0:· | 00040ad0:·0a0a·2320·4c69·7374·206f·6620·6c6f·6720··..#·List·of·log· | ||
| 00040ae0:· | 00040ae0:·6669·6c65·2070·6174·6873·2074·6f20·6265··file·paths·to·be | ||
| 00040af0:· | 00040af0:·2069·6e73·7065·6374·6564·2066·6f72·2063···inspected·for·c | ||
| 00040b00:· | 00040b00:·6f72·7265·6374·2070·6572·6d69·7373·696f··orrect·permissio | ||
| 00040b10:· | 00040b10:·6e73·0a23·202a·2050·7269·6d61·7269·6c79··ns.#·*·Primarily | ||
| 00040b20:· | 00040b20:·2069·6e73·7065·6374·206c·6f67·2066·696c···inspect·log·fil | ||
| 00040b30:· | 00040b30:·6520·7061·7468·7320·6c69·7374·6564·2069··e·paths·listed·i | ||
| 00040b40:· | 00040b40:·6e20·2f65·7463·2f72·7379·736c·6f67·2e63··n·/etc/rsyslog.c | ||
| 00040b50:·6 | 00040b50:·6f6e·660a·5253·5953·4c4f·475f·4554·435f··onf.RSYSLOG_ETC_ | ||
| 00040b60:· | 00040b60:·434f·4e46·4947·3d22·2f65·7463·2f72·7379··CONFIG="/etc/rsy | ||
| 00040b70:·7 | 00040b70:·736c·6f67·2e63·6f6e·6622·0a23·202a·2041··slog.conf".#·*·A | ||
| 00040b80:·6 | 00040b80:·6e64·2061·6c73·6f20·7468·6520·6c6f·6720··nd·also·the·log· | ||
| 00040b90:·6 | 00040b90:·6669·6c65·2070·6174·6873·206c·6973·7465··file·paths·liste | ||
| 00040ba0:· | 00040ba0:·6420·6166·7465·7220·7273·7973·6c6f·6727··d·after·rsyslog' | ||
| 00040bb0:·73 | 00040bb0:·7320·2449·6e63·6c75·6465·436f·6e66·6967··s·$IncludeConfig | ||
| 00040bc0:· | 00040bc0:·2064·6972·6563·7469·7665·0a23·2020·2028···directive.#···( | ||
| 00040bd0:· | 00040bd0:·7374·6f72·6520·7468·6520·7265·7375·6c74··store·the·result | ||
| 00040be0:· | 00040be0:·2069·6e74·6f20·6172·7261·7920·666f·7220···into·array·for· | ||
| 00040bf0:· | 00040bf0:·7468·6520·6361·7365·2074·6865·7265·2773··the·case·there's | ||
| 00040c00:· | 00040c00:·2073·6865·6c6c·2067·6c6f·6220·7573·6564···shell·glob·used | ||
| 00040c10:· | 00040c10:·2061·7320·7661·6c75·6520·6f66·2049·6e63···as·value·of·Inc | ||
| 00040c20:·6 | 00040c20:·6c75·6465·436f·6e66·6967·290a·7265·6164··ludeConfig).read | ||
| 00040c30:· | 00040c30:·6172·7261·7920·2d74·204f·4c44·5f49·4e43··array·-t·OLD_INC | ||
| 00040c40:· | 00040c40:·2026·6c74·3b20·266c·743b·2867·7265·7020···<·<(grep· | ||
| 00040c50:· | 00040c50:·2d65·2022·5c24·496e·636c·7564·6543·6f6e··-e·"\$IncludeCon | ||
| 00040c60:· | 00040c60:·6669·675b·5b3a·7370·6163·653a·5d5d·5c2b··fig[[:space:]]\+ | ||
| 00040c70:· | 00040c70:·5b5e·5b3a·7370·6163·653a·5d3b·5d5c·2b22··[^[:space:];]\+" | ||
| 00040c80:· | 00040c80:·202f·6574·632f·7273·7973·6c6f·672e·636f···/etc/rsyslog.co | ||
| 00040c90:· | 00040c90:·6e66·207c·2063·7574·202d·6420·2720·2720··nf·|·cut·-d·'·'· | ||
| 00040ca0:·2 | 00040ca0:·2d66·2032·290a·7265·6164·6172·7261·7920··-f·2).readarray· | ||
| 00040cb0:·2d | 00040cb0:·2d74·2052·5359·534c·4f47·5f49·4e43·4c55··-t·RSYSLOG_INCLU | ||
| 00040cc0:· | 00040cc0:·4445·5f43·4f4e·4649·4720·266c·743b·2026··DE_CONFIG·<·& | ||
| 00040cd0:· | 00040cd0:·6c74·3b28·666f·7220·494e·4350·4154·4820··lt;(for·INCPATH· | ||
| 00040ce0:· | 00040ce0:·696e·2022·247b·4f4c·445f·494e·435b·405d··in·"${OLD_INC[@] | ||
| 00040cf0:· | 00040cf0:·7d22·3b20·646f·2065·7661·6c20·7072·696e··}";·do·eval·prin | ||
| 00040d00:· | 00040d00:·7466·2027·2573·5c5c·6e27·2022·247b·494e··tf·'%s\\n'·"${IN | ||
| 00040d10:· | 00040d10:·4350·4154·487d·223b·2064·6f6e·6529·0a72··CPATH}";·done).r | ||
| 00040d20:· | 00040d20:·6561·6461·7272·6179·202d·7420·4e45·575f··eadarray·-t·NEW_ | ||
| 00040d30:· | 00040d30:·494e·4320·266c·743b·2026·6c74·3b28·7365··INC·<·<(se | ||
| 00040d40:· | 00040d40:·6420·2d6e·2027·2f5e·5c73·2a69·6e63·6c75··d·-n·'/^\s*inclu | ||
| 00040d50:· | 00040d50:·6465·282f·2c2f·292f·4970·2720·2f65·7463··de(/,/)/Ip'·/etc | ||
| 00040d60:· | 00040d60:·2f72·7379·736c·6f67·2e63·6f6e·6620·7c20··/rsyslog.conf·|· | ||
| 00040d70:· | 00040d70:·7365·6420·2d6e·2027·7340·2e2a·6669·6c65··sed·-n·'s@.*file | ||
| 00040d80:· | 00040d80:·5c73·2a3d·5c73·2a22·5c28·5b2f·5b3a·616c··\s*=\s*"\([/[:al | ||
| 00040d90:·6 | 00040d90:·6e75·6d3a·5d5b·3a70·756e·6374·3a5d·5d2a··num:][:punct:]]* | ||
| 00040da0:· | 00040da0:·5c29·222e·2a40·5c31·4049·7027·290a·7265··\)".*@\1@Ip').re | ||
| 00040db0:·6 | 00040db0:·6164·6172·7261·7920·2d74·2052·5359·534c··adarray·-t·RSYSL | ||
| 00040dc0:· | 00040dc0:·4f47·5f49·4e43·4c55·4445·2026·6c74·3b20··OG_INCLUDE·<· | ||
| 00040dd0:·2 | 00040dd0:·266c·743b·2866·6f72·2049·4e43·5041·5448··<(for·INCPATH | ||
| 00040de0:· | 00040de0:·2069·6e20·2224·7b4e·4557·5f49·4e43·5b40···in·"${NEW_INC[@ | ||
| 00040df0:· | 00040df0:·5d7d·223b·2064·6f20·6576·616c·2070·7269··]}";·do·eval·pri | ||
| 00040e00:· | 00040e00:·6e74·6620·2725·735c·5c6e·2720·2224·7b49··ntf·'%s\\n'·"${I | ||
| 00040e10:· | 00040e10:·4e43·5041·5448·7d22·3b20·646f·6e65·290a··NCPATH}";·done). | ||
| 00040e20:·2 | 00040e20:·0a23·2044·6563·6c61·7265·2061·6e20·6172··.#·Declare·an·ar | ||
| 00040e30:· | 00040e30:·7261·7920·746f·2068·6f6c·6420·7468·6520··ray·to·hold·the· | ||
| 00040e40:· | 00040e40:·6669·6e61·6c20·6c69·7374·206f·6620·6469··final·list·of·di | ||
| 00040e50:·6 | 00040e50:·6666·6572·656e·7420·6c6f·6720·6669·6c65··fferent·log·file | ||
| 00040e60:· | 00040e60:·2070·6174·6873·0a64·6563·6c61·7265·202d···paths.declare·- | ||
| 00040e70:·6 | 00040e70:·6120·4c4f·475f·4649·4c45·5f50·4154·4853··a·LOG_FILE_PATHS | ||
| 00040e80:· | 00040e80:·0a0a·2320·4172·7261·7920·746f·2068·6f6c··..#·Array·to·hol | ||
| 00040e90:·64 | 00040e90:·6420·616c·6c20·7273·7973·6c6f·6720·636f··d·all·rsyslog·co | ||
| 00040ea0:· | 00040ea0:·6e66·6967·2065·6e74·7269·6573·0a52·5359··nfig·entries.RSY | ||
| 00040eb0:· | 00040eb0:·534c·4f47·5f43·4f4e·4649·4753·3d28·290a··SLOG_CONFIGS=(). | ||
| 00040ec0:· | 00040ec0:·5253·5953·4c4f·475f·434f·4e46·4947·533d··RSYSLOG_CONFIGS= | ||
| 00040ed0:· | 00040ed0:·2822·247b·5253·5953·4c4f·475f·4554·435f··("${RSYSLOG_ETC_ | ||
| 00040ee0:· | 00040ee0:·434f·4e46·4947·7d22·2022·247b·5253·5953··CONFIG}"·"${RSYS | ||
| 00040ef0:· | 00040ef0:·4c4f·475f·494e·434c·5544·455f·434f·4e46··LOG_INCLUDE_CONF | ||
| 00040f00:· | 00040f00:·4947·5b40·5d7d·2220·2224·7b52·5359·534c··IG[@]}"·"${RSYSL | ||
| 00040f10:· | 00040f10:·4f47·5f49·4e43·4c55·4445·5b40·5d7d·2229··OG_INCLUDE[@]}") | ||
| 00040f20:· | 00040f20:·0a0a·2320·4765·7420·6675·6c6c·206c·6973··..#·Get·full·lis | ||
| 00040f30:· | 00040f30:·7420·6f66·2066·696c·6573·2074·6f20·6265··t·of·files·to·be | ||
| 00040f40:· | 00040f40:·2063·6865·636b·6564·0a23·2052·5359·534c···checked.#·RSYSL | ||
| 00040f50:· | 00040f50:·4f47·5f43·4f4e·4649·4753·206d·6179·2063··OG_CONFIGS·may·c | ||
| 00040f60:·6 | 00040f60:·6f6e·7461·696e·2067·6c6f·6273·2073·7563··ontain·globs·suc | ||
| 00040f70:· | 00040f70:·6820·6173·0a23·202f·6574·632f·7273·7973··h·as.#·/etc/rsys | ||
| 00040f80:·6 | 00040f80:·6c6f·672e·642f·2a2e·636f·6e66·202f·6574··log.d/*.conf·/et | ||
| 00040f90:· | 00040f90:·632f·7273·7973·6c6f·672e·642f·2a2e·6672··c/rsyslog.d/*.fr | ||
| 00040fa0:· | 00040fa0:·756c·650a·2320·536f·2c20·6c6f·6f70·206f··ule.#·So,·loop·o | ||
| 00040fb0:· | 00040fb0:·7665·7220·7468·6520·656e·7472·6965·7320··ver·the·entries· | ||
| 00040fc0:· | 00040fc0:·696e·2052·5359·534c·4f47·5f43·4f4e·4649··in·RSYSLOG_CONFI | ||
| 00040fd0:· | 00040fd0:·4753·2061·6e64·2075·7365·2066·696e·6420··GS·and·use·find· | ||
| 00040fe0:·4 | 00040fe0:·746f·2067·6574·2074·6865·206c·6973·7420··to·get·the·list· | ||
| 00040ff0:· | 00040ff0:·6f66·2069·6e63·6c75·6465·6420·6669·6c65··of·included·file | ||
| 00041000:· | 00041000:·732e·0a52·5359·534c·4f47·5f43·4f4e·4649··s..RSYSLOG_CONFI | ||
| 00041010:· | 00041010:·475f·4649·4c45·533d·2829·0a66·6f72·2045··G_FILES=().for·E | ||
| 00041020:· | 00041020:·4e54·5259·2069·6e20·2224·7b52·5359·534c··NTRY·in·"${RSYSL | ||
| 00041030:· | 00041030:·4f47·5f43·4f4e·4649·4753·5b40·5d7d·220a··OG_CONFIGS[@]}". | ||
| 00041040:· | 00041040:·646f·0a09·2320·4966·2064·6972·6563·746f··do..#·If·directo | ||
| 00041050:· | 00041050:·7279·2c20·7273·7973·6c6f·6720·7769·6c6c··ry,·rsyslog·will | ||
| 00041060:· | 00041060:·2073·6561·7263·6820·666f·7220·636f·6e66···search·for·conf | ||
| Max diff block lines reached; 978624/1080660 bytes (90.56%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·22.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·22.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 289, 14 lines modified | Offset 289, 137 lines modified | ||
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 290 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 290 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 299 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 300 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 301 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 302 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 303 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 304 | of·IncludeConfig) | ||
| 305 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+"·/ | ||
| 306 | etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 307 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 308 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 309 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed·- | ||
| 310 | n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 311 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 312 | '%s\\n'·"${INCPATH}";·done) | ||
| 313 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 314 | declare·-a·LOG_FILE_PATHS | ||
| 315 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 316 | RSYSLOG_CONFIGS=() | ||
| 317 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 318 | {RSYSLOG_INCLUDE[@]}") | ||
| 319 | #·Get·full·list·of·files·to·be·checked | ||
| 320 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 321 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 322 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 323 | included·files. | ||
| 324 | RSYSLOG_CONFIG_FILES=() | ||
| 325 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 326 | do | ||
| 327 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 328 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 329 | » if·[·-d·"${ENTRY}"·] | ||
| 330 | » then | ||
| 331 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 332 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 333 | » elif·[·-f·"${ENTRY}"·] | ||
| 334 | » then | ||
| 335 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 336 | » else | ||
| 337 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 338 | » fi | ||
| 339 | done | ||
| 340 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 341 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default·configuration) | ||
| 342 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 343 | do | ||
| 344 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 345 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 346 | ('$')·characters, | ||
| 347 | » #·*·Ignore·empty·lines, | ||
| 348 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 349 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 350 | not·log·files | ||
| 351 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 352 | path | ||
| 353 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 354 | all·of·the | ||
| 355 | » #·following·are·met: | ||
| 356 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 357 | » #·*·it·is·preceded·by·space | ||
| 358 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';')·characters | ||
| 359 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 360 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 361 | » then | ||
| 362 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 363 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 364 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 365 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 366 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 367 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 368 | {FILTERED_PATHS}") | ||
| 369 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 370 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 371 | newline),·split | ||
| 372 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 373 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 374 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 375 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 376 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 377 | » » #·Delete·the·temporary·array | ||
| 378 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 379 | » fi | ||
| 380 | done | ||
| 381 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so·grep | ||
| 382 | regex·is·a·bit | ||
| 383 | #·curly: | ||
| 384 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 385 | #·extract·File="logfile"·expression | ||
| 386 | #·match·only·"logfile"·expression | ||
| 387 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 388 | do | ||
| 389 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 390 | "${LOG_FILE}") | ||
| 391 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 392 | alnum:][:punct:]]*)\"\s*\)") | ||
| 393 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| Max diff block lines reached; 127648/134258 bytes (95.08%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037da0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037da0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037db0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037db0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037dc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037dc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037dd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037dd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037de0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037de0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037df0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037df0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037e00:·2032·3032·3 | 00037e00:·2032·3032·352d·3132·2d31·3129·0a20·2020···2025-12-11).··· | ||
| 00037e10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037e10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037e20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037e20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15104, 130 lines modified | Offset 15104, 130 lines modified | ||
| 0003aff0:·6574·3d22·2369·646d·3239·3033·2220·7461··et="#idm2903"·ta | 0003aff0:·6574·3d22·2369·646d·3239·3033·2220·7461··et="#idm2903"·ta | ||
| 0003b000:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b000:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b010:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b010:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b020:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b020:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b030:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b030:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b040:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b040:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b050:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b050:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b060:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b070:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b080:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b090:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b0a0:·6964·3d22·6964·6d32·3930·3322·3e3c·7461··id="idm2903"><ta | |||
| 0003b0b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b0c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b0d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b0e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b0f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b100:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b110:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b120:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b130:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b140:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b150:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b160:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b170:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b180:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b190:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b1a0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b1b0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b1c0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b1d0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b1e0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b1f0:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b200:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b210:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b220:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b230:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b240:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b250:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b260:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b270:·4953·412d·5354·4947·2d55·4254·552d·3232··ISA-STIG-UBTU-22 | |||
| 0003b280:·2d36·3531·3031·300a·2020·2d20·4e49·5354··-651010.··-·NIST | |||
| 0003b290:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b2a0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b2b0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b2c0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b2d0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b2e0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b2f0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b300:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b310:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b320:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b330:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b340:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b350:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b360:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b370:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b380:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b390:·612d·7461·7267·6574·3d22·2369·646d·3239··a-target="#idm29 | |||
| 0003b3a0:·3034·2220·7461·6269·6e64·6578·3d22·3022··04"·tabindex="0" | |||
| 0003b3b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b3c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b3d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b3e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b3f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b400:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b410:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b420:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b430:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b440:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b450:·6964·3d22·6964·6d32·3930·3422·3e3c·7072··id="idm2904"><pr | |||
| 0003b460:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b470:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b480:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b490:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b4a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b4b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b4c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b4d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b4e0:·6574·3d22·2369·646d·3239·3035·2220·7461··et="#idm2905"·ta | |||
| 0003b4f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b500:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b510:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b520:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b530:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b540:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b | 0003b060:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b | 0003b070:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003b080:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003b090:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003b0a0:·2269·646d·3239·3033·223e·3c74·6162·6c65··"idm2903"><table | ||
| 0003b | 0003b0b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b0c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b0d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b0e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b0f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b100:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b110:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003b120:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b130:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b | 0003b140:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003b150:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003b160:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b170:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b | 0003b180:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003b | 0003b190:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b | 0003b1a0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b | 0003b1b0:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b | 0003b1c0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b | 0003b1d0:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | ||
| 0003b | 0003b1e0:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | ||
| Max diff block lines reached; 17505989/17523707 bytes (99.90%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·22.04·LTS·Security·Technical·Implementation | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·22.04·LTS·Security·Technical·Implementation |
| 42 | ··············Guide·(STIG)·V1R1 | 42 | ··············Guide·(STIG)·V1R1 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 45 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 125, 14 lines modified | Offset 125, 27 lines modified | ||
| 125 | include·install_aide | 125 | include·install_aide |
| 126 | class·install_aide·{ | 126 | class·install_aide·{ |
| 127 | ··package·{·'aide': | 127 | ··package·{·'aide': |
| 128 | ····ensure·=>·'installed', | 128 | ····ensure·=>·'installed', |
| 129 | ··} | 129 | ··} |
| 130 | } | 130 | } |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 138 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 137 | ··package: | 148 | ··package: |
| Offset 152, 27 lines modified | Offset 165, 14 lines modified | ||
| 152 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | [[packages]] | 168 | [[packages]] |
| 156 | name·=·"aide" | 169 | name·=·"aide" |
| 157 | version·=·"*" | 170 | version·=·"*" |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 165 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 166 | else | ||
| 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 168 | fi | ||
| 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 170 | Run·the·following·command·to·generate·a·new·database: | 172 | Run·the·following·command·to·generate·a·new·database: |
| 171 | $·sudo·aideinit | 173 | $·sudo·aideinit |
| 172 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 174 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 173 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 175 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 174 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 176 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 175 | generated·database·can·be·installed·as·follows: | 177 | generated·database·can·be·installed·as·follows: |
| Offset 197, 14 lines modified | Offset 197, 40 lines modified | ||
| 197 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 197 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 200 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 200 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 201 | ············_\x8c_\x8i_\x8s············1.3.1 | 201 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 202 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 202 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 203 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 203 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 205 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 206 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 207 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 208 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 209 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 210 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 211 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 212 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 213 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 214 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 215 | fi | ||
| 216 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 217 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 218 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 219 | fi | ||
| 220 | /usr/sbin/aideinit·-y·-f | ||
| 221 | else | ||
| 222 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 223 | fi | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 209 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 229 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 210 | ··ansible.builtin.apt: | 230 | ··ansible.builtin.apt: |
| Offset 367, 40 lines modified | Offset 393, 14 lines modified | ||
| 367 | ··-·PCI-DSSv4-11.5.2 | 393 | ··-·PCI-DSSv4-11.5.2 |
| 368 | ··-·aide_build_database | 394 | ··-·aide_build_database |
| 369 | ··-·low_complexity | 395 | ··-·low_complexity |
| 370 | ··-·low_disruption | 396 | ··-·low_disruption |
| 371 | ··-·medium_severity | 397 | ··-·medium_severity |
| 372 | ··-·no_reboot_needed | 398 | ··-·no_reboot_needed |
| 373 | ··-·restrict_strategy | 399 | ··-·restrict_strategy |
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 375 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 376 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 377 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 378 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| Max diff block lines reached; 1199145/1205508 bytes (99.47%) of diff not shown. | |||
| Offset 3, 4974 lines modified | Offset 3, 4912 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_kptr_restrict_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Restrict·Exposed·Kernel·Pointer·Addresses·Access</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_kptr_restrict_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_admin_space_left_action_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Configure·auditd·admin_space_left·Action·on·Low·Disk·Space</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_admin_space_left_action_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_kerb_auth_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>Disable·Kerberos·Authentication</ocil:title> | ||
| 30 | ······<ocil:actions> | ||
| 31 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_kerb_auth_action:testaction:1</ocil:test_action_ref> | ||
| 32 | ······</ocil:actions> | ||
| 33 | ····</ocil:questionnaire> | ||
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_shadow_ocil:questionnaire:1"> | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_shadow_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify·Permissions·on·Backup·shadow·File</ocil:title> | 11 | ······<ocil:title>Verify·Permissions·on·Backup·shadow·File</ocil:title> |
| 36 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> | 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>En | 17 | ······<ocil:title>Enable·module·signature·verification</ocil:title> |
| 42 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_renameat_ocil:questionnaire:1"> | ||
| 47 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_gshadow_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Verify·Group·Who·Owns·gshadow·File</ocil:title> | ||
| 48 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-s | 28 | ····<ocil:questionnaire·id="ocil:ssg-disallow_bypass_password_sudo_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 29 | ······<ocil:title>Disallow·Configuration·to·Bypass·Password·Requirements·for·Privilege·Escalation</ocil:title> |
| 54 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-s | 31 | ········<ocil:test_action_ref>ocil:ssg-disallow_bypass_password_sudo_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_ocil:questionnaire:1"> | ||
| 59 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_poisoning_zero_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Use·zero·for·poisoning·instead·of·debugging·value</ocil:title> | ||
| 60 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_page_poisoning_zero_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_systemmap_ocil:questionnaire:1"> | ||
| 65 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_dmesg_restrict_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Restrict·unprivileged·access·to·the·kernel·syslog</ocil:title> | ||
| 66 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_dmesg_restrict_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_audit_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 47 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0750·or·Less·Permissive</ocil:title> |
| 72 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-directory_permissions_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_no_command_negation_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Di | 53 | ······<ocil:title>Don't·define·allowed·commands·in·sudoers·by·means·of·exclusion</ocil:title> |
| 78 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-sudoers_no_command_negation_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-package_logrotate_installed_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·logrotate·is·Installed</ocil:title> |
| 84 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-package_logrotate_installed_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_action_mail_acct_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 65 | ······<ocil:title>Configure·auditd·mail_acct·Action·on·Low·Disk·Space</ocil:title> |
| 90 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_action_mail_acct_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-ss | 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_route_localnet_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 71 | ······<ocil:title>Prevent·Routing·External·Traffic·to·Local·Loopback·on·All·IPv4·Interfaces</ocil:title> |
| 96 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-ss | 73 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_route_localnet_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 77 | ······<ocil:title>Verify·Permissions·on·/var/log·Directory</ocil:title> |
| 102 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_binary_dirs_ocil:questionnaire:1"> | ||
| 107 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_mac_modification_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Record·Events·that·Modify·the·System's·Mandatory·Access·Controls</ocil:title> | ||
| 108 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_mac_modification_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_max_auth_tries_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 89 | ······<ocil:title>Set·SSH·authentication·attempt·limit</ocil:title> |
| 114 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_max_auth_tries_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-ss | 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_protected_hardlinks_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Enable· | 95 | ······<ocil:title>Enable·Kernel·Parameter·to·Enforce·DAC·on·Hardlinks</ocil:title> |
| 120 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-ss | 97 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_protected_hardlinks_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 101 | ······<ocil:title>Prevent·Login·to·Accounts·With·Empty·Password</ocil:title> |
| Max diff block lines reached; 669183/680666 bytes (98.31%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 157 lines modified | Offset 72, 157 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_ | 79 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="package_ | 84 | ····<cpe-lang:platform·id="package_ntp"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg- | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 94 | ····<cpe-lang:platform·id="machine"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 98 | ········</cpe-lang:logical-test> | ||
| 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 100 | ········ | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 101 | ········</cpe-lang:logical-test> | ||
| 102 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 104 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> | ||
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 108 | ········</cpe-lang:logical-test> | 108 | ········</cpe-lang:logical-test> |
| 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 111 | ········</cpe-lang:logical-test> | 111 | ········</cpe-lang:logical-test> |
| 112 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id="package_ | 114 | ····<cpe-lang:platform·id="package_logrotate"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 119 | ····<cpe-lang:platform·id="package_sudo"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg- | 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 122 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 123 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="machine_and_package_ | 124 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 129 | ······</cpe-lang:logical-test> | ||
| 130 | ····</cpe-lang:platform> | ||
| 131 | ····<cpe-lang:platform·id="package_pam"> | ||
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="not_aarch64_arch"> | 130 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 145 | ······</cpe-lang:logical-test> | ||
| 146 | ····</cpe-lang:platform> | ||
| 147 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 150 | ······</cpe-lang:logical-test> | ||
| 151 | ····</cpe-lang:platform> | ||
| 152 | ····<cpe-lang:platform·id="package_ntp"> | ||
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | ||
| 155 | ······</cpe-lang:logical-test> | ||
| 156 | ····</cpe-lang:platform> | ||
| 157 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 160 | ······</cpe-lang:logical-test> | ||
| 161 | ····</cpe-lang:platform> | ||
| 162 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 135 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 165 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 166 | ········</cpe-lang:logical-test> | 139 | ········</cpe-lang:logical-test> |
| 167 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 140 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 168 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 141 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 169 | ········</cpe-lang:logical-test> | 142 | ········</cpe-lang:logical-test> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | ||
| 150 | ····</cpe-lang:platform> | ||
| 173 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 151 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 174 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 177 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 1706211/1718367 bytes (99.29%) of diff not shown. | |||
| Offset 3, 3461 lines modified | Offset 3, 3461 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_gssapi_auth_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Enable·GSSAPI·Authentication</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_gssapi_auth_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-package_openssh-server_installed_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Verify·Permissions·on·Backup·gshadow·File</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_passwd_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Verify·User·Who·Owns·passwd·File</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-account_unique_name_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·All·Accounts·on·the·System·Have·Unique·Names</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-account_unique_name_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_group_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Verify·User·Who·Owns·Backup·group·File</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_systemmap_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Verify· | 41 | ······<ocil:title>Verify·Permissions·on·System.map·Files</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_systemmap_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-package_gnutls-utils_installed_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_postmaster_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Configure·System·to·Forward·All·Mail·From·Postmaster·to·The·Root·Account</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-p | 49 | ········<ocil:test_action_ref>ocil:ssg-postfix_client_configure_mail_alias_postmaster_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>En | 53 | ······<ocil:title>Ensure·/var·Located·On·Separate·Partition</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchownat_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_kptr_restrict_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Restrict·Exposed·Kernel·Pointer·Addresses·Access</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_kptr_restrict_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-s | 64 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_requiretty_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>En | 65 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·requiretty</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-s | 67 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_requiretty_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_poweroff_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·poweroff</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_poweroff_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_watch_localtime_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-service_sshd_disabled_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable·SSH·Server·If·Possible</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-service_sshd_disabled_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_stime_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Record·Attempts·to·Alter·Time·Through·stime</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_stime_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lsetxattr_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-accounts_polyinstantiated_var_tmp_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Configure·Polyinstantiation·of·/var/tmp·Directories</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-a | 91 | ········<ocil:test_action_ref>ocil:ssg-accounts_polyinstantiated_var_tmp_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_specify_remote_server_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>A·remote·time·server·for·Chrony·is·configured</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-chronyd_specify_remote_server_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_suid_dumpable_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Disable·Core·Dumps·for·SUID·programs</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_suid_dumpable_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_default_mmap_min_addr_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_arp_ignore_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Configure·Response·Mode·of·ARP·Requests·for·All·IPv4·Interfaces</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_arp_ignore_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-no_netrc_files_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Verify·No·netrc·Files·Exist</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-no_netrc_files_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-coredump_disable_storage_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Disable·storing·core·dump</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-coredump_disable_storage_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 698350/711111 bytes (98.21%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 181 lines modified | Offset 72, 181 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_ | 79 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="package_ | 84 | ····<cpe-lang:platform·id="package_ntp"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-p | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 93 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 94 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 95 | ····<cpe-lang:platform·id="machine | 94 | ····<cpe-lang:platform·id="machine"> |
| 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 99 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 100 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 101 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 104 | ······</cpe-lang:logical-test> | ||
| 105 | ····</cpe-lang:platform> | ||
| 106 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 108 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 109 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 110 | ········</cpe-lang:logical-test> | ||
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 112 | ········ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 113 | ········</cpe-lang:logical-test> | ||
| 114 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 115 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 116 | ····<cpe-lang:platform·id="not_ | 104 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> |
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 119 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-p | 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 120 | ········</cpe-lang:logical-test> | 108 | ········</cpe-lang:logical-test> |
| 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-p | 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 123 | ········</cpe-lang:logical-test> | 111 | ········</cpe-lang:logical-test> |
| 124 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id="package_ | 114 | ····<cpe-lang:platform·id="package_logrotate"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 129 | ······</cpe-lang:logical-test> | ||
| 130 | ····</cpe-lang:platform> | ||
| 131 | ····<cpe-lang:platform·id="machine"> | ||
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="machine_and_ | 119 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 141 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id="package_ | 125 | ····<cpe-lang:platform·id="package_sudo"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 146 | ······</cpe-lang:logical-test> | ||
| 147 | ····</cpe-lang:platform> | ||
| 148 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 151 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | 130 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 157 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 158 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 159 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 162 | ······</cpe-lang:logical-test> | ||
| 163 | ····</cpe-lang:platform> | ||
| 164 | ····<cpe-lang:platform·id="package_ntp"> | ||
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | ||
| 167 | ······</cpe-lang:logical-test> | ||
| 168 | ····</cpe-lang:platform> | ||
| 169 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-p | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 141 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 143 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 177 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 144 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 178 | ········</cpe-lang:logical-test> | 145 | ········</cpe-lang:logical-test> |
| 179 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 146 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 180 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 147 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 181 | ········</cpe-lang:logical-test> | 148 | ········</cpe-lang:logical-test> |
| 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 183 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 184 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| Max diff block lines reached; 1819204/1831935 bytes (99.31%) of diff not shown. | |||
| Offset 3, 4292 lines modified | Offset 3, 4292 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_allow_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Verify·Permissions·on· | 11 | ······<ocil:title>Verify·Permissions·on·/etc/cron.allow·file</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ | 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chage_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_kptr_restrict_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Restrict·Exposed·Kernel·Pointer·Addresses·Access</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_kptr_restrict_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_owner | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_at_allow_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Verify·User·Who·Owns·/etc/at.allow·file</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-file_owner | 25 | ········<ocil:test_action_ref>ocil:ssg-file_owner_at_allow_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ssh_agent_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-smartcard_configure_ca_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Configure·Smart·Card·Certificate·Authority·Validation</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-smartcard_configure_ca_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_retry_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Authentication·Retry·Prompts·Permitted·Per-Session</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_retry_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-package_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-package_openldap-clients_removed_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Ensure·LDAP·client·is·not·installed</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-package_ | 43 | ········<ocil:test_action_ref>ocil:ssg-package_openldap-clients_removed_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-n | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_retpoline_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Avoid·speculative·indirect·branches·in·kernel</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-n | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_retpoline_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_space_left_percentage_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_deny_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Lock·Accounts·After·Failed·Password·Attempts</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-a | 55 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_faillock_deny_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-package_nftables_removed_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Disable·Accepting·Router·Advertisements·on·all·IPv6·Interfaces·by·Default</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-ss | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_private_key_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Private·*_key·Key·Files</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-ss | 67 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_system_commands_dirs_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify·that· | 71 | ······<ocil:title>Verify·that·system·commands·files·are·group·owned·by·root·or·a·system·account</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_system_commands_dirs_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_gshadow_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-root_permissions_syslibrary_files_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Verify·the·system-wide·library·files·in·directories | ||
| 78 | "/lib",·"/lib64",·"/usr/lib/"·and·"/usr/lib64"·are·group-owned·by·root.</ocil:title> | ||
| 78 | ······<ocil:actions> | 79 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 80 | ········<ocil:test_action_ref>ocil:ssg-root_permissions_syslibrary_files_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 81 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 82 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_open_ocil:questionnaire:1"> | ||
| 83 | ···· | 83 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_library_dirs_ocil:questionnaire:1"> |
| 84 | ······<ocil:title>Verify·that·Shared·Library·Directories·Have·Restrictive·Permissions</ocil:title> | ||
| 84 | ······<ocil:actions> | 85 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 86 | ········<ocil:test_action_ref>ocil:ssg-dir_permissions_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 87 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 88 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 89 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_warn_age_login_defs_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>S | 90 | ······<ocil:title>Set·Password·Warning·Age</ocil:title> |
| 90 | ······<ocil:actions> | 91 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 92 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_warn_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 93 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 94 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_net_ocil:questionnaire:1"> | ||
| 95 | ···· | 95 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> |
| 96 | ······<ocil:title>Ensure·No·World-Writable·Files·Exist</ocil:title> | ||
| 96 | ······<ocil:actions> | 97 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 98 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_unauthorized_world_writable_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 99 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 100 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-pa | 101 | ····<ocil:questionnaire·id="ocil:ssg-package_mcafeetp_installed_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 102 | ······<ocil:title>Install·McAfee·Endpoint·Security·for·Linux·(ENSL)</ocil:title> |
| 102 | ······<ocil:actions> | 103 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-pa | 104 | ········<ocil:test_action_ref>ocil:ssg-package_mcafeetp_installed_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 105 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 106 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_secure_redirects_ocil:questionnaire:1"> | ||
| 107 | ···· | 107 | ····<ocil:questionnaire·id="ocil:ssg-sshd_x11_use_localhost_ocil:questionnaire:1"> |
| 108 | ······<ocil:title>Prevent·remote·hosts·from·connecting·to·the·proxy·display</ocil:title> | ||
| 108 | ······<ocil:actions> | 109 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-s | 110 | ········<ocil:test_action_ref>ocil:ssg-sshd_x11_use_localhost_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 111 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 112 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_ocil:questionnaire:1"> | ||
| 113 | ···· | 113 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_pub_key_ocil:questionnaire:1"> |
| 114 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> | ||
| 114 | ······<ocil:actions> | 115 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 116 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 117 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 118 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_ocil:questionnaire:1"> | ||
| 119 | ···· | 119 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_usb-storage_disabled_ocil:questionnaire:1"> |
| Max diff block lines reached; 1365560/1378138 bytes (99.09%) of diff not shown. | |||
| Offset 3, 9346 lines modified | Offset 3, 9185 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_dev_shm_nosuid_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Add·nosuid·Option·to·/dev/shm</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-mount_option_dev_shm_nosuid_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setfacl_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Record·Any·Attempts·to·Run·setfacl</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_setfacl_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-p | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sudoedit_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·sudoedit</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-p | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_sudoedit_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-ufw_rate_limit_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>ufw·Must·rate-limit·network·interfaces</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-ufw_rate_limit_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-a | 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_login_events_faillock_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Record·Attempts·to·Alter·Logon·and·Logout·Events·-·faillock</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-a | 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_login_events_faillock_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmep_argument_absent_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_audit_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0750·or·Less·Permissive</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-directory_permissions_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Verify·Permissions·on·Backup·gshadow·File</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_hourly_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Verify·Owner·on·cron.hourly</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_hourly_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-grub2_spectre_v2_argument_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-account_use_centralized_automated_auth_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Use·Centralized·and·Automated·Authentication</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-account_use_centralized_automated_auth_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_mac_modification_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Record· | 65 | ······<ocil:title>Record·Events·that·Modify·the·System's·Mandatory·Access·Controls</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_mac_modification_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_gpasswd_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-disable_host_auth_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable·Host-Based·Authentication</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-disable_host_auth_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_shutdown_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·shutdown</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_shutdown_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-service_rsyslog_enabled_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Enable·rsyslog·Service</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-service_rsyslog_enabled_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-package_openldap-servers_removed_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_forwarding_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable·Kernel·Parameter·for·IPv6·Forwarding</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_forwarding_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_bashrc_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·the·Default·Bash·Umask·is·Set·Correctly</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_bashrc_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-accounts_root_path_dirs_no_write_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-package_rsh-server_removed_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Uninstall·rsh-server·Package</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-package_rsh-server_removed_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-root_permissions_syslibrary_files_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Verify·th | 107 | ······<ocil:title>Verify·the·system-wide·library·files·in·directories |
| 108 | "/lib",·"/lib64",·"/usr/lib/"·and·"/usr/lib64"·are·group-owned·by·root.</ocil:title> | ||
| 108 | ······<ocil:actions> | 109 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 110 | ········<ocil:test_action_ref>ocil:ssg-root_permissions_syslibrary_files_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 111 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 112 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_messages_ocil:questionnaire:1"> | ||
| 113 | ···· | 113 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_stig_ocil:questionnaire:1"> |
| 114 | ······<ocil:title>Configure·auditd·max_log_file_action·Upon·Reaching·Maximum·Log·Size</ocil:title> | ||
| 114 | ······<ocil:actions> | 115 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 116 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action_stig_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 117 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 118 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-auditd_log_format_ocil:questionnaire:1"> | ||
| 119 | ···· | 119 | ····<ocil:questionnaire·id="ocil:ssg-package_openssh-server_installed_ocil:questionnaire:1"> |
| 120 | ······<ocil:title>Install·the·OpenSSH·Server·Package</ocil:title> | ||
| 120 | ······<ocil:actions> | 121 | ······<ocil:actions> |
| Max diff block lines reached; 1425391/1437990 bytes (99.12%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····19 | 2 | -rw-r--r--···0········0········0·····1980·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··1230 | 3 | -rw-r--r--···0········0········0··1230032·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037d20:·7320·6f66·2032·3032·3 | 00037d20:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 16001, 146 lines modified | Offset 16001, 146 lines modified | ||
| 0003e800:·6172·6765·743d·2223·6964·6d31·3934·3022··arget="#idm1940" | 0003e800:·6172·6765·743d·2223·6964·6d31·3934·3022··arget="#idm1940" | ||
| 0003e810:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003e810:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003e820:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003e820:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003e830:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003e830:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003e840:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003e840:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003e850:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003e850:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003e860:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003e860:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003e870:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003e880:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003e890:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003e8a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003e8b0:·6964·3d22·6964·6d31·3934·3022·3e3c·7461··id="idm1940"><ta | |||
| 0003e8c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003e8d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003e8e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003e8f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003e900:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003e910:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003e920:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003e930:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003e940:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003e950:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003e960:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003e970:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003e980:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003e990:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003e9a0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003e9b0:·3e3c·636f·6465·3e0a·666f·7220·6620·696e··><code>.for·f·in | |||
| 0003e9c0:·202f·6574·632f·7375·646f·6572·7320·2f65···/etc/sudoers·/e | |||
| 0003e9d0:·7463·2f73·7564·6f65·7273·2e64·2f2a·203b··tc/sudoers.d/*·; | |||
| 0003e9e0:·2064·6f0a·2020·6966·205b·2021·202d·6520···do.··if·[·!·-e· | |||
| 0003e9f0:·2224·6622·205d·203b·2074·6865·6e0a·2020··"$f"·]·;·then.·· | |||
| 0003ea00:·2020·636f·6e74·696e·7565·0a20·2066·690a····continue.··fi. | |||
| 0003ea10:·2020·6d61·7463·6869·6e67·5f6c·6973·743d····matching_list= | |||
| 0003ea20:·2428·6772·6570·202d·5020·275e·283f·2123··$(grep·-P·'^(?!# | |||
| 0003ea30:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | |||
| 0003ea40:·7469·6361·7465·2e2a·2427·2024·6620·7c20··ticate.*$'·$f·|· | |||
| 0003ea50:·756e·6971·2029·0a20·2069·6620·2120·7465··uniq·).··if·!·te | |||
| 0003ea60:·7374·202d·7a20·2224·6d61·7463·6869·6e67··st·-z·"$matching | |||
| 0003ea70:·5f6c·6973·7422·3b20·7468·656e·0a20·2020··_list";·then.··· | |||
| 0003ea80:·2077·6869·6c65·2049·4653·3d20·7265·6164···while·IFS=·read | |||
| 0003ea90:·202d·7220·656e·7472·793b·2064·6f0a·2020···-r·entry;·do.·· | |||
| 0003eaa0:·2020·2020·2320·636f·6d6d·656e·7420·6f75······#·comment·ou | |||
| 0003eab0:·7420·2221·6175·7468·656e·7469·6361·7465··t·"!authenticate | |||
| 0003eac0:·2220·6d61·7463·6865·7320·746f·2070·7265··"·matches·to·pre | |||
| 0003ead0:·7365·7276·6520·7573·6572·2064·6174·610a··serve·user·data. | |||
| 0003eae0:·2020·2020·2020·7365·6420·2d69·2022·732f········sed·-i·"s/ | |||
| 0003eaf0:·5e24·7b65·6e74·7279·7d24·2f23·2026·616d··^${entry}$/#·&am | |||
| 0003eb00:·703b·2f67·2220·2466·0a20·2020·2064·6f6e··p;/g"·$f.····don | |||
| 0003eb10:·6520·266c·743b·266c·743b·266c·743b·2022··e·<<<·" | |||
| 0003eb20:·246d·6174·6368·696e·675f·6c69·7374·220a··$matching_list". | |||
| 0003eb30:·0a20·2020·202f·7573·722f·7362·696e·2f76··.····/usr/sbin/v | |||
| 0003eb40:·6973·7564·6f20·2d63·6620·2466·2026·616d··isudo·-cf·$f·&am | |||
| 0003eb50:·703b·2667·743b·202f·6465·762f·6e75·6c6c··p;>·/dev/null | |||
| 0003eb60:·207c·7c20·6563·686f·2022·4661·696c·2074···||·echo·"Fail·t | |||
| 0003eb70:·6f20·7661·6c69·6461·7465·2024·6620·7769··o·validate·$f·wi | |||
| 0003eb80:·7468·2076·6973·7564·6f22·0a20·2066·690a··th·visudo".··fi. | |||
| 0003eb90:·646f·6e65·0a3c·2f63·6f64·653e·3c2f·7072··done.</code></pr | |||
| 0003eba0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ebb0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ebc0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ebd0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ebe0:·6172·6765·743d·2223·6964·6d31·3934·3122··arget="#idm1941" | |||
| 0003ebf0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003ec00:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003ec10:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003ec20:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003ec30:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003ec40:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003e | 0003ec50:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003e | 0003ec60:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003e | 0003ec70:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003e | 0003ec80:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003e8b0:·6522·2069·643d·2269·646d·3139·3430·223e··e"·id="idm1940"> | |||
| 0003e8c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003e8d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003e8e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003e8f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003e900:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003e910:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003e920:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e930:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003e940:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e950:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003e960:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003e970:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003e980:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003e990:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003e9a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003e9b0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003e9c0:·3a20·4669·6e64·202f·6574·632f·7375·646f··:·Find·/etc/sudo | |||
| 0003e9d0:·6572·732e·642f·2066·696c·6573·0a20·2061··ers.d/·files.··a | |||
| 0003e9e0:·6e73·6962·6c65·2e62·7569·6c74·696e·2e66··nsible.builtin.f | |||
| 0003e9f0:·696e·643a·0a20·2020·2070·6174·6873·3a0a··ind:.····paths:. | |||
| 0003ea00:·2020·2020·2d20·2f65·7463·2f73·7564·6f65······-·/etc/sudoe | |||
| 0003ea10:·7273·2e64·2f0a·2020·7265·6769·7374·6572··rs.d/.··register | |||
| 0003ea20:·3a20·7375·646f·6572·730a·2020·7461·6773··:·sudoers.··tags | |||
| 0003ea30:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003ea40:·332d·434d·2d36·2861·290a·2020·2d20·4e49··3-CM-6(a).··-·NI | |||
| 0003ea50:·5354·2d38·3030·2d35·332d·4941·2d31·310a··ST-800-53-IA-11. | |||
| 0003ea60:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003ea70:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003ea80:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003ea90:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003eaa0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003eab0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003eac0:·7465·6779·0a20·202d·2073·7564·6f5f·7265··tegy.··-·sudo_re | |||
| 0003ead0:·6d6f·7665·5f6e·6f5f·6175·7468·656e·7469··move_no_authenti | |||
| 0003eae0:·6361·7465·0a0a·2d20·6e61·6d65·3a20·5265··cate..-·name:·Re | |||
| 0003eaf0:·6d6f·7665·206c·696e·6573·2063·6f6e·7461··move·lines·conta | |||
| 0003eb00:·696e·696e·6720·2161·7574·6865·6e74·6963··ining·!authentic | |||
| Max diff block lines reached; 907994/927920 bytes (97.85%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:11 | 41 | ····*·cpe:/o:debian:debian_linux:11 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| Max diff block lines reached; 111135/116868 bytes (95.09%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·313 | 00037d40:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 16021, 146 lines modified | Offset 16021, 146 lines modified | ||
| 0003e940:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 0003e940:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 0003e950:·3934·3022·2074·6162·696e·6465·783d·2230··940"·tabindex="0 | 0003e950:·3934·3022·2074·6162·696e·6465·783d·2230··940"·tabindex="0 | ||
| 0003e960:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003e960:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003e970:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003e970:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003e980:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003e980:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003e990:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003e990:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003e9a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003e9a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003e9b0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003e9c0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003e9d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003e9e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003e9f0:·7365·2220·6964·3d22·6964·6d31·3934·3022··se"·id="idm1940" | |||
| 0003ea00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003ea10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ea20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ea30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ea40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ea50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ea60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ea70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ea80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ea90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003eaa0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003eab0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003eac0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003ead0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 0003eae0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003eaf0:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 0003eb00:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 0003eb10:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 0003eb20:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 0003eb30:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 0003eb40:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 0003eb50:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 0003eb60:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 0003eb70:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 0003eb80:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 0003eb90:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 0003eba0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 0003ebb0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 0003ebc0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 0003ebd0:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 0003ebe0:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 0003ebf0:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 0003ec00:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 0003ec10:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 0003ec20:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 0003ec30:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 0003ec40:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 0003ec50:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 0003ec60:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 0003ec70:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 0003ec80:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 0003ec90:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 0003eca0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 0003ecb0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 0003ecc0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 0003ecd0:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 0003ece0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ecf0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ed00:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ed10:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ed20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003ed30:·3934·3122·2074·6162·696e·6465·783d·2230··941"·tabindex="0 | |||
| 0003ed40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ed50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ed60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003ed70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ed80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003e | 0003ed90:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003e | 0003eda0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003e | 0003edb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003e | 0003edc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003e | 0003edd0:·6c61·7073·6522·2069·643d·2269·646d·3139··lapse"·id="idm19 | ||
| 0003ea00:·3430·223e·3c74·6162·6c65·2063·6c61·7373··40"><table·class | |||
| 0003ea10:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ea20:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ea30:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ea40:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ea50:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ea60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ea70:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ea80:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003ea90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003eaa0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003eab0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003eac0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003ead0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 0003eae0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 0003eaf0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003eb00:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 0003eb10:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 0003eb20:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 0003eb30:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 0003eb40:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 0003eb50:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 0003eb60:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 0003eb70:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 0003eb80:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003eb90:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 0003eba0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 0003ebb0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003ebc0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003ebd0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003ebe0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003ebf0:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 0003ec00:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 0003ec10:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 0003ec20:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 0003ec30:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| Max diff block lines reached; 984530/1004594 bytes (98.00%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:11 | 42 | ····*·cpe:/o:debian:debian_linux:11 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| Max diff block lines reached; 119331/125069 bytes (95.41%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037cd0:·3 | 00037cd0:·352d·3132·2d31·3129·0a20·2020·2020·2020··5-12-11).······· | ||
| 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 14776, 146 lines modified | Offset 14776, 146 lines modified | ||
| 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00039b80:·3934·3022·2074·6162·696e·6465·783d·2230··940"·tabindex="0 | 00039b80:·3934·3022·2074·6162·696e·6465·783d·2230··940"·tabindex="0 | ||
| 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039be0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039bf0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00039c00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039c10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039c20:·7365·2220·6964·3d22·6964·6d31·3934·3022··se"·id="idm1940" | |||
| 00039c30:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c40:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c50:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039c60:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039c70:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039c80:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039ca0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039cb0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039cd0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039ce0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cf0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039d00:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00039d10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039d20:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 00039d30:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 00039d40:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 00039d50:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 00039d60:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 00039d70:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 00039d80:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 00039d90:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 00039da0:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 00039db0:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 00039dc0:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 00039dd0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 00039de0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 00039df0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 00039e00:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 00039e10:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 00039e20:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 00039e30:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 00039e40:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 00039e50:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 00039e60:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 00039e70:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 00039e80:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 00039e90:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 00039ea0:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 00039eb0:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 00039ec0:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 00039ed0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 00039ee0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 00039ef0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 00039f00:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 00039f10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 00039f60:·3934·3122·2074·6162·696e·6465·783d·2230··941"·tabindex="0 | |||
| 00039f70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039f80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039f90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fa0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039fc0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039 | 00039fd0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039 | 00039fe0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039 | 00039ff0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039c20:·6c61·7073·6522·2069·643d·2269·646d·3139··lapse"·id="idm19 | |||
| 00039c30:·3430·223e·3c74·6162·6c65·2063·6c61·7373··40"><table·class | |||
| 00039c40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039c50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039c60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039c70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039c80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039c90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039ca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039cb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039cc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039cd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039ce0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039cf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039d00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 00039d10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 00039d20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039d30:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 00039d40:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 00039d50:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 00039d60:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 00039d70:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 00039d80:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 00039d90:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 00039da0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00039dc0:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 00039dd0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 00039de0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00039df0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00039e00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00039e10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00039e20:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 00039e30:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 00039e40:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 00039e50:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 00039e60:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| 00039e70:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | |||
| Max diff block lines reached; 282602/302528 bytes (93.41%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:debian:debian_linux:11 | 40 | ····*·cpe:/o:debian:debian_linux:11 |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 91, 14 lines modified | Offset 91, 35 lines modified | ||
| 91 | ···························1.7,·SR·1.8,·SR·1.9 | 91 | ···························1.7,·SR·1.8,·SR·1.9 |
| 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 97 | ···························SRG-OS-000373-GPOS-00158 | 97 | ···························SRG-OS-000373-GPOS-00158 |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 103 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 104 | ··if·[·!·-e·"$f"·]·;·then | ||
| 105 | ····continue | ||
| 106 | ··fi | ||
| 107 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 108 | ··if·!·test·-z·"$matching_list";·then | ||
| 109 | ····while·IFS=·read·-r·entry;·do | ||
| 110 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 111 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 112 | ····done·<<<·"$matching_list" | ||
| 113 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 114 | visudo" | ||
| 115 | ··fi | ||
| 116 | done | ||
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 103 | -·name:·Find·/etc/sudoers.d/·files | 122 | -·name:·Find·/etc/sudoers.d/·files |
| 104 | ··ansible.builtin.find: | 123 | ··ansible.builtin.find: |
| Offset 129, 35 lines modified | Offset 150, 14 lines modified | ||
| 129 | ··-·NIST-800-53-IA-11 | 150 | ··-·NIST-800-53-IA-11 |
| 130 | ··-·low_complexity | 151 | ··-·low_complexity |
| 131 | ··-·low_disruption | 152 | ··-·low_disruption |
| 132 | ··-·medium_severity | 153 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 134 | ··-·restrict_strategy | 155 | ··-·restrict_strategy |
| 135 | ··-·sudo_remove_no_authenticate | 156 | ··-·sudo_remove_no_authenticate |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 141 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 142 | ··if·[·!·-e·"$f"·]·;·then | ||
| 143 | ····continue | ||
| 144 | ··fi | ||
| 145 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 146 | ··if·!·test·-z·"$matching_list";·then | ||
| 147 | ····while·IFS=·read·-r·entry;·do | ||
| 148 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 149 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 150 | ····done·<<<·"$matching_list" | ||
| 151 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 152 | visudo" | ||
| 153 | ··fi | ||
| 154 | done | ||
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 156 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 159 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 158 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 160 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 159 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 161 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 160 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 162 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 161 | ············Without·re-authentication,·users·may·access·resources·or·perform | 163 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 178, 14 lines modified | Offset 178, 35 lines modified | ||
| 178 | ···························1.7,·SR·1.8,·SR·1.9 | 178 | ···························1.7,·SR·1.8,·SR·1.9 |
| 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 184 | ···························SRG-OS-000373-GPOS-00158 | 184 | ···························SRG-OS-000373-GPOS-00158 |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 191 | ··if·[·!·-e·"$f"·]·;·then | ||
| 192 | ····continue | ||
| 193 | ··fi | ||
| 194 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 195 | ··if·!·test·-z·"$matching_list";·then | ||
| 196 | ····while·IFS=·read·-r·entry;·do | ||
| 197 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 198 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 199 | ····done·<<<·"$matching_list" | ||
| 200 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 201 | visudo" | ||
| 202 | ··fi | ||
| 203 | done | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 190 | -·name:·Find·/etc/sudoers.d/·files | 209 | -·name:·Find·/etc/sudoers.d/·files |
| 191 | ··ansible.builtin.find: | 210 | ··ansible.builtin.find: |
| Offset 216, 35 lines modified | Offset 237, 14 lines modified | ||
| 216 | ··-·NIST-800-53-IA-11 | 237 | ··-·NIST-800-53-IA-11 |
| 217 | ··-·low_complexity | 238 | ··-·low_complexity |
| 218 | ··-·low_disruption | 239 | ··-·low_disruption |
| Max diff block lines reached; 37135/42851 bytes (86.66%) of diff not shown. | |||
| Offset 14283, 15 lines modified | Offset 14283, 15 lines modified | ||
| 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037d10:·3 | 00037d10:·352d·3132·2d31·3129·0a20·2020·2020·2020··5-12-11).······· | ||
| 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 16011, 147 lines modified | Offset 16011, 147 lines modified | ||
| 0003e8a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003e8a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003e8b0:·743d·2223·6964·6d31·3934·3022·2074·6162··t="#idm1940"·tab | 0003e8b0:·743d·2223·6964·6d31·3934·3022·2074·6162··t="#idm1940"·tab | ||
| 0003e8c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003e8c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003e8d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003e8d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003e8e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003e8e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003e8f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003e8f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003e900:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003e900:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003e910:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003e920:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003e930:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003e940:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003e950:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003e960:·6964·6d31·3934·3022·3e3c·7461·626c·6520··idm1940"><table· | |||
| 0003e970:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003e980:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003e990:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003e9a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003e9b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003e9c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e9d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003e9e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003e9f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ea00:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ea10:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003ea20:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ea30:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003ea40:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003ea50:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ea60:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 0003ea70:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 0003ea80:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 0003ea90:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 0003eaa0:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 0003eab0:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 0003eac0:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 0003ead0:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 0003eae0:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 0003eaf0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 0003eb00:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 0003eb10:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 0003eb20:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 0003eb30:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 0003eb40:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 0003eb50:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 0003eb60:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 0003eb70:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 0003eb80:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 0003eb90:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 0003eba0:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 0003ebb0:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 0003ebc0:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 0003ebd0:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 0003ebe0:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 0003ebf0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 0003ec00:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 0003ec10:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 0003ec20:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 0003ec30:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 0003ec40:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ec50:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ec60:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ec70:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ec80:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ec90:·743d·2223·6964·6d31·3934·3122·2074·6162··t="#idm1941"·tab | |||
| 0003eca0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ecb0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ecc0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ecd0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ece0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003e | 0003ecf0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003e | 0003ed00:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003e | 0003ed10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003e | 0003ed20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003e | 0003ed30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003e | 0003ed40:·643d·2269·646d·3139·3431·223e·3c74·6162··d="idm1941"><tab | ||
| 0003e | 0003ed50:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003e | 0003ed60:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003e | 0003ed70:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003e | 0003ed80:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003e | 0003ed90:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003e9c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e9d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003e9e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e9f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ea00:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ea10:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003ea20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ea30:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ea40:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003ea50:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ea60:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 0003ea70:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 0003ea80:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 0003ea90:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 0003eaa0:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 0003eab0:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 0003eac0:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 0003ead0:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 0003eae0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003eaf0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 0003eb00:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 0003eb10:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003eb20:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003eb30:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003eb40:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003eb50:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 0003eb60:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 0003eb70:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 0003eb80:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 0003eb90:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 0003eba0:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| Max diff block lines reached; 942550/962614 bytes (97.92%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:11 | 41 | ····*·cpe:/o:debian:debian_linux:11 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| Max diff block lines reached; 115642/121368 bytes (95.28%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037d30:·3230·323 | 00037d30:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16220, 736 lines modified | Offset 16220, 736 lines modified | ||
| 0003f5b0:·7267·6574·3d22·2369·646d·3530·3437·2220··rget="#idm5047"· | 0003f5b0:·7267·6574·3d22·2369·646d·3530·3437·2220··rget="#idm5047"· | ||
| 0003f5c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003f5c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003f5d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003f5d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003f5e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003f5e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003f5f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003f5f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003f600:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003f600:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (722 lines added, 722 lines removed) | |
| 0003f610:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003f610:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003f620:·6e20· | 0003f620:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003f630:· | 0003f630:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003f640:· | 0003f640:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003f650:·6 | 0003f650:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003f660:· | 0003f660:·643d·2269·646d·3530·3437·223e·3c70·7265··d="idm5047"><pre | ||
| 0003f670:· | 0003f670:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003f680:· | 0003f680:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003f690:· | 0003f690:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003f6a0:· | 0003f6a0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003f6b0:· | 0003f6b0:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | ||
| 0003f6c0:·6 | 0003f6c0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | ||
| 0003f6d0:· | 0003f6d0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | ||
| 0003f6e0:· | 0003f6e0:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | ||
| 0003f6f0:·6 | 0003f6f0:·6e0a·0a23·204c·6973·7420·6f66·206c·6f67··n..#·List·of·log | ||
| 0003f700:· | 0003f700:·2066·696c·6520·7061·7468·7320·746f·2062···file·paths·to·b | ||
| 0003f710:·6 | 0003f710:·6520·696e·7370·6563·7465·6420·666f·7220··e·inspected·for· | ||
| 0003f720:·6 | 0003f720:·636f·7272·6563·7420·7065·726d·6973·7369··correct·permissi | ||
| 0003f730:· | 0003f730:·6f6e·730a·2320·2a20·5072·696d·6172·696c··ons.#·*·Primaril | ||
| 0003f740:·7 | 0003f740:·7920·696e·7370·6563·7420·6c6f·6720·6669··y·inspect·log·fi | ||
| 0003f750:· | 0003f750:·6c65·2070·6174·6873·206c·6973·7465·6420··le·paths·listed· | ||
| 0003f760:·6 | 0003f760:·696e·202f·6574·632f·7273·7973·6c6f·672e··in·/etc/rsyslog. | ||
| 0003f770:·6 | 0003f770:·636f·6e66·0a52·5359·534c·4f47·5f45·5443··conf.RSYSLOG_ETC | ||
| 0003f780:· | 0003f780:·5f43·4f4e·4649·473d·222f·6574·632f·7273··_CONFIG="/etc/rs | ||
| 0003f790:· | 0003f790:·7973·6c6f·672e·636f·6e66·220a·2320·2a20··yslog.conf".#·*· | ||
| 0003f7a0:· | 0003f7a0:·416e·6420·616c·736f·2074·6865·206c·6f67··And·also·the·log | ||
| 0003f7b0:· | 0003f7b0:·2066·696c·6520·7061·7468·7320·6c69·7374···file·paths·list | ||
| 0003f7c0:·6 | 0003f7c0:·6564·2061·6674·6572·2072·7379·736c·6f67··ed·after·rsyslog | ||
| 0003f7d0:· | 0003f7d0:·2773·2024·496e·636c·7564·6543·6f6e·6669··'s·$IncludeConfi | ||
| 0003f7e0:·6 | 0003f7e0:·6720·6469·7265·6374·6976·650a·2320·2020··g·directive.#··· | ||
| 0003f7f0:·2 | 0003f7f0:·2873·746f·7265·2074·6865·2072·6573·756c··(store·the·resul | ||
| 0003f800:· | 0003f800:·7420·696e·746f·2061·7272·6179·2066·6f72··t·into·array·for | ||
| 0003f810:· | 0003f810:·2074·6865·2063·6173·6520·7468·6572·6527···the·case·there' | ||
| 0003f820:· | 0003f820:·7320·7368·656c·6c20·676c·6f62·2075·7365··s·shell·glob·use | ||
| 0003f830:·6 | 0003f830:·6420·6173·2076·616c·7565·206f·6620·496e··d·as·value·of·In | ||
| 0003f840:· | 0003f840:·636c·7564·6543·6f6e·6669·6729·0a72·6561··cludeConfig).rea | ||
| 0003f850:·6 | 0003f850:·6461·7272·6179·202d·7420·4f4c·445f·494e··darray·-t·OLD_IN | ||
| 0003f860:· | 0003f860:·4320·266c·743b·2026·6c74·3b28·6772·6570··C·<·<(grep | ||
| 0003f870:· | 0003f870:·202d·6520·225c·2449·6e63·6c75·6465·436f···-e·"\$IncludeCo | ||
| 0003f880:· | 0003f880:·6e66·6967·5b5b·3a73·7061·6365·3a5d·5d5c··nfig[[:space:]]\ | ||
| 0003f890:· | 0003f890:·2b5b·5e5b·3a73·7061·6365·3a5d·3b5d·5c2b··+[^[:space:];]\+ | ||
| 0003f8a0:· | 0003f8a0:·2220·2f65·7463·2f72·7379·736c·6f67·2e63··"·/etc/rsyslog.c | ||
| 0003f8b0:· | 0003f8b0:·6f6e·6620·7c20·6375·7420·2d64·2027·2027··onf·|·cut·-d·'·' | ||
| 0003f8c0:· | 0003f8c0:·202d·6620·3229·0a72·6561·6461·7272·6179···-f·2).readarray | ||
| 0003f8d0:· | 0003f8d0:·202d·7420·5253·5953·4c4f·475f·494e·434c···-t·RSYSLOG_INCL | ||
| 0003f8e0:· | 0003f8e0:·5544·455f·434f·4e46·4947·2026·6c74·3b20··UDE_CONFIG·<· | ||
| 0003f8f0:· | 0003f8f0:·266c·743b·2866·6f72·2049·4e43·5041·5448··<(for·INCPATH | ||
| 0003f900:· | 0003f900:·2069·6e20·2224·7b4f·4c44·5f49·4e43·5b40···in·"${OLD_INC[@ | ||
| 0003f910:·5 | 0003f910:·5d7d·223b·2064·6f20·6576·616c·2070·7269··]}";·do·eval·pri | ||
| 0003f920:·6 | 0003f920:·6e74·6620·2725·735c·5c6e·2720·2224·7b49··ntf·'%s\\n'·"${I | ||
| 0003f930:· | 0003f930:·4e43·5041·5448·7d22·3b20·646f·6e65·290a··NCPATH}";·done). | ||
| 0003f940:·65 | 0003f940:·7265·6164·6172·7261·7920·2d74·204e·4557··readarray·-t·NEW | ||
| 0003f950:· | 0003f950:·5f49·4e43·2026·6c74·3b20·266c·743b·2873··_INC·<·<(s | ||
| 0003f960:· | 0003f960:·6564·202d·6e20·272f·5e5c·732a·696e·636c··ed·-n·'/^\s*incl | ||
| 0003f970:·75 | 0003f970:·7564·6528·2f2c·2f29·2f49·7027·202f·6574··ude(/,/)/Ip'·/et | ||
| 0003f980:·6 | 0003f980:·632f·7273·7973·6c6f·672e·636f·6e66·207c··c/rsyslog.conf·| | ||
| 0003f990:· | 0003f990:·2073·6564·202d·6e20·2773·402e·2a66·696c···sed·-n·'s@.*fil | ||
| 0003f9a0:· | 0003f9a0:·655c·732a·3d5c·732a·225c·285b·2f5b·3a61··e\s*=\s*"\([/[:a | ||
| 0003f9b0:· | 0003f9b0:·6c6e·756d·3a5d·5b3a·7075·6e63·743a·5d5d··lnum:][:punct:]] | ||
| 0003f9c0:· | 0003f9c0:·2a5c·2922·2e2a·405c·3140·4970·2729·0a72··*\)".*@\1@Ip').r | ||
| 0003f9d0:· | 0003f9d0:·6561·6461·7272·6179·202d·7420·5253·5953··eadarray·-t·RSYS | ||
| 0003f9e0:· | 0003f9e0:·4c4f·475f·494e·434c·5544·4520·266c·743b··LOG_INCLUDE·< | ||
| 0003f9f0:·202 | 0003f9f0:·2026·6c74·3b28·666f·7220·494e·4350·4154···<(for·INCPAT | ||
| 0003fa00:· | 0003fa00:·4820·696e·2022·247b·4e45·575f·494e·435b··H·in·"${NEW_INC[ | ||
| 0003fa10:· | 0003fa10:·405d·7d22·3b20·646f·2065·7661·6c20·7072··@]}";·do·eval·pr | ||
| 0003fa20:· | 0003fa20:·696e·7466·2027·2573·5c5c·6e27·2022·247b··intf·'%s\\n'·"${ | ||
| 0003fa30:· | 0003fa30:·494e·4350·4154·487d·223b·2064·6f6e·6529··INCPATH}";·done) | ||
| 0003fa40:· | 0003fa40:·0a0a·2320·4465·636c·6172·6520·616e·2061··..#·Declare·an·a | ||
| 0003fa50:· | 0003fa50:·7272·6179·2074·6f20·686f·6c64·2074·6865··rray·to·hold·the | ||
| 0003fa60:· | 0003fa60:·2066·696e·616c·206c·6973·7420·6f66·2064···final·list·of·d | ||
| 0003fa70:· | 0003fa70:·6966·6665·7265·6e74·206c·6f67·2066·696c··ifferent·log·fil | ||
| 0003fa80:· | 0003fa80:·6520·7061·7468·730a·6465·636c·6172·6520··e·paths.declare· | ||
| 0003fa90:· | 0003fa90:·2d61·204c·4f47·5f46·494c·455f·5041·5448··-a·LOG_FILE_PATH | ||
| 0003faa0:· | 0003faa0:·530a·0a23·2041·7272·6179·2074·6f20·686f··S..#·Array·to·ho | ||
| 0003fab0:·6 | 0003fab0:·6c64·2061·6c6c·2072·7379·736c·6f67·2063··ld·all·rsyslog·c | ||
| 0003fac0:· | 0003fac0:·6f6e·6669·6720·656e·7472·6965·730a·5253··onfig·entries.RS | ||
| 0003fad0:· | 0003fad0:·5953·4c4f·475f·434f·4e46·4947·533d·2829··YSLOG_CONFIGS=() | ||
| 0003fae0:· | 0003fae0:·0a52·5359·534c·4f47·5f43·4f4e·4649·4753··.RSYSLOG_CONFIGS | ||
| 0003faf0:· | 0003faf0:·3d28·2224·7b52·5359·534c·4f47·5f45·5443··=("${RSYSLOG_ETC | ||
| 0003fb00:· | 0003fb00:·5f43·4f4e·4649·477d·2220·2224·7b52·5359··_CONFIG}"·"${RSY | ||
| 0003fb10:·53 | 0003fb10:·534c·4f47·5f49·4e43·4c55·4445·5f43·4f4e··SLOG_INCLUDE_CON | ||
| 0003fb20:· | 0003fb20:·4649·475b·405d·7d22·2022·247b·5253·5953··FIG[@]}"·"${RSYS | ||
| 0003fb30:· | 0003fb30:·4c4f·475f·494e·434c·5544·455b·405d·7d22··LOG_INCLUDE[@]}" | ||
| 0003fb40:· | 0003fb40:·290a·0a23·2047·6574·2066·756c·6c20·6c69··)..#·Get·full·li | ||
| 0003fb50:· | 0003fb50:·7374·206f·6620·6669·6c65·7320·746f·2062··st·of·files·to·b | ||
| 0003fb60:· | 0003fb60:·6520·6368·6563·6b65·640a·2320·5253·5953··e·checked.#·RSYS | ||
| 0003fb70:· | 0003fb70:·4c4f·475f·434f·4e46·4947·5320·6d61·7920··LOG_CONFIGS·may· | ||
| 0003fb80:· | 0003fb80:·636f·6e74·6169·6e20·676c·6f62·7320·7375··contain·globs·su | ||
| 0003fb90:·6 | 0003fb90:·6368·2061·730a·2320·2f65·7463·2f72·7379··ch·as.#·/etc/rsy | ||
| 0003fba0:· | 0003fba0:·736c·6f67·2e64·2f2a·2e63·6f6e·6620·2f65··slog.d/*.conf·/e | ||
| 0003fbb0:· | 0003fbb0:·7463·2f72·7379·736c·6f67·2e64·2f2a·2e66··tc/rsyslog.d/*.f | ||
| 0003fbc0:·6c65· | 0003fbc0:·7275·6c65·0a23·2053·6f2c·206c·6f6f·7020··rule.#·So,·loop· | ||
| 0003fbd0:·6 | 0003fbd0:·6f76·6572·2074·6865·2065·6e74·7269·6573··over·the·entries | ||
| 0003fbe0:· | 0003fbe0:·2069·6e20·5253·5953·4c4f·475f·434f·4e46···in·RSYSLOG_CONF | ||
| 0003fbf0:· | 0003fbf0:·4947·5320·616e·6420·7573·6520·6669·6e64··IGS·and·use·find | ||
| 0003fc00:· | 0003fc00:·2074·6f20·6765·7420·7468·6520·6c69·7374···to·get·the·list | ||
| 0003fc10:· | 0003fc10:·206f·6620·696e·636c·7564·6564·2066·696c···of·included·fil | ||
| 0003fc20:·6 | 0003fc20:·6573·2e0a·5253·5953·4c4f·475f·434f·4e46··es..RSYSLOG_CONF | ||
| 0003fc30:· | 0003fc30:·4947·5f46·494c·4553·3d28·290a·666f·7220··IG_FILES=().for· | ||
| 0003fc40:· | 0003fc40:·454e·5452·5920·696e·2022·247b·5253·5953··ENTRY·in·"${RSYS | ||
| 0003fc50:· | 0003fc50:·4c4f·475f·434f·4e46·4947·535b·405d·7d22··LOG_CONFIGS[@]}" | ||
| 0003fc60:· | 0003fc60:·0a64·6f0a·0923·2049·6620·6469·7265·6374··.do..#·If·direct | ||
| 0003fc70:·6 | 0003fc70:·6f72·792c·2072·7379·736c·6f67·2077·696c··ory,·rsyslog·wil | ||
| 0003fc80:· | 0003fc80:·6c20·7365·6172·6368·2066·6f72·2063·6f6e··l·search·for·con | ||
| Max diff block lines reached; 806398/907744 bytes (88.84%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·11 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·11 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:11 | 42 | ····*·cpe:/o:debian:debian_linux:11 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 258, 14 lines modified | Offset 258, 139 lines modified | ||
| 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 267 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 268 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 269 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 270 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 271 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 272 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 273 | of·IncludeConfig) | ||
| 274 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 275 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 276 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 277 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 278 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 279 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 280 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 281 | '%s\\n'·"${INCPATH}";·done) | ||
| 282 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 283 | declare·-a·LOG_FILE_PATHS | ||
| 284 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 285 | RSYSLOG_CONFIGS=() | ||
| 286 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 287 | {RSYSLOG_INCLUDE[@]}") | ||
| 288 | #·Get·full·list·of·files·to·be·checked | ||
| 289 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 290 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 291 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 292 | included·files. | ||
| 293 | RSYSLOG_CONFIG_FILES=() | ||
| 294 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 295 | do | ||
| 296 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 297 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 298 | » if·[·-d·"${ENTRY}"·] | ||
| 299 | » then | ||
| 300 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 301 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 302 | » elif·[·-f·"${ENTRY}"·] | ||
| 303 | » then | ||
| 304 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 305 | » else | ||
| 306 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 307 | » fi | ||
| 308 | done | ||
| 309 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 310 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 311 | configuration) | ||
| 312 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 313 | do | ||
| 314 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 315 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 316 | ('$')·characters, | ||
| 317 | » #·*·Ignore·empty·lines, | ||
| 318 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 319 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 320 | not·log·files | ||
| 321 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 322 | path | ||
| 323 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 324 | all·of·the | ||
| 325 | » #·following·are·met: | ||
| 326 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 327 | » #·*·it·is·preceded·by·space | ||
| 328 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 329 | characters | ||
| 330 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 331 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 332 | » then | ||
| 333 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 334 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 335 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 336 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 337 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 338 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 339 | {FILTERED_PATHS}") | ||
| 340 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 341 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 342 | newline),·split | ||
| 343 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 344 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 345 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 346 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 347 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 348 | » » #·Delete·the·temporary·array | ||
| 349 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 350 | » fi | ||
| 351 | done | ||
| 352 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 353 | grep·regex·is·a·bit | ||
| 354 | #·curly: | ||
| 355 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 356 | #·extract·File="logfile"·expression | ||
| 357 | #·match·only·"logfile"·expression | ||
| 358 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 359 | do | ||
| 360 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 361 | "${LOG_FILE}") | ||
| 362 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| Max diff block lines reached; 106642/113212 bytes (94.20%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037de0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037df0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037df0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037e00:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037e00:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e10:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e10:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e20:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e20:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e30:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e30:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e40:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e40:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e50:·3032·3 | 00037e50:·3032·352d·3132·2d31·3129·0a20·2020·2020··025-12-11).····· | ||
| 00037e60:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e60:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e70:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e70:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e80:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e80:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e90:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e90:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037ea0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037ea0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037eb0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037eb0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ec0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ec0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15076, 129 lines modified | Offset 15076, 129 lines modified | ||
| 0003ae30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ae30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ae40:·743d·2223·6964·6d32·3636·3322·2074·6162··t="#idm2663"·tab | 0003ae40:·743d·2223·6964·6d32·3636·3322·2074·6162··t="#idm2663"·tab | ||
| 0003ae50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ae50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ae60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ae60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ae70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ae70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ae80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ae80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ae90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ae90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003aea0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003aea0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003aeb0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003aec0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003aed0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003aee0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003aef0:·6964·6d32·3636·3322·3e3c·7461·626c·6520··idm2663"><table· | |||
| 0003af00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003af10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003af20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003af30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003af40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003aeb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003aec0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003aed0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003aee0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003aef0:·643d·2269·646d·3236·3633·223e·3c74·6162··d="idm2663"><tab | |||
| 0003af00:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003af10:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003af20:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003af30:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003af40:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003af50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003af60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003af70:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003af | 0003af50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003af60:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003af70:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003af80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003af90:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003afa0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003afb0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003afc0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003afd0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003afe0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003aff0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003b000:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003b010:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003b020:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003b030:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003b040:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003b050:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003b060:·656e·7620·5d3b·2074·6865·6e0a·0a44·4542··env·];·then..DEB | |||
| 0003b070:·4941·4e5f·4652·4f4e·5445·4e44·3d6e·6f6e··IAN_FRONTEND=non | |||
| 0003b080:·696e·7465·7261·6374·6976·6520·6170·742d··interactive·apt- | |||
| 0003b090:·6765·7420·696e·7374·616c·6c20·2d79·2022··get·install·-y·" | |||
| 0003b0a0:·6169·6465·220a·0a65·6c73·650a·2020·2020··aide"..else.···· | |||
| 0003b0b0:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003b0c0:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003b0d0:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003b0e0:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b0f0:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003b100:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b110:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b120:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b130:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b140:·6172·6765·743d·2223·6964·6d32·3636·3422··arget="#idm2664" | |||
| 0003b150:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b160:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b170:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b180:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b190:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b1a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b1b0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b1c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b1d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b1e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1f0:·6522·2069·643d·2269·646d·3236·3634·223e··e"·id="idm2664"> | |||
| 0003b200:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b210:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b220:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b230:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b240:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b250:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b260:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b270:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b280:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003 | 0003b290:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003afa | 0003b2a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003 | 0003b2b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003 | 0003b2c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003 | 0003b2d0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003 | 0003b2e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003 | 0003b2f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003b300:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | ||
| 0003b | 0003b310:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | ||
| 0003b | 0003b320:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | ||
| 0003b | 0003b330:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | ||
| 0003b | 0003b340:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | ||
| 0003b | 0003b350:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 0003b | 0003b360:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 0003b | 0003b370:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 0003b | 0003b380:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 0003b | 0003b390:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 0003b | 0003b3a0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | ||
| 0003b | 0003b3b0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | ||
| 0003b | 0003b3c0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b | 0003b3d0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | ||
| 0003b | 0003b3e0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003b | 0003b3f0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003b | 0003b400:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | ||
| 0003b | 0003b410:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | ||
| 0003b | 0003b420:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | ||
| 0003b | 0003b430:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | ||
| 0003b | 0003b440:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | ||
| Max diff block lines reached; 17331828/17349408 bytes (99.90%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 125, 14 lines modified | Offset 125, 27 lines modified | ||
| 125 | include·install_aide | 125 | include·install_aide |
| 126 | class·install_aide·{ | 126 | class·install_aide·{ |
| 127 | ··package·{·'aide': | 127 | ··package·{·'aide': |
| 128 | ····ensure·=>·'installed', | 128 | ····ensure·=>·'installed', |
| 129 | ··} | 129 | ··} |
| 130 | } | 130 | } |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 138 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 137 | ··package: | 148 | ··package: |
| Offset 151, 27 lines modified | Offset 164, 14 lines modified | ||
| 151 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | [[packages]] | 167 | [[packages]] |
| 155 | name·=·"aide" | 168 | name·=·"aide" |
| 156 | version·=·"*" | 169 | version·=·"*" |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 164 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 165 | else | ||
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 167 | fi | ||
| 168 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 169 | Run·the·following·command·to·generate·a·new·database: | 171 | Run·the·following·command·to·generate·a·new·database: |
| 170 | $·sudo·aideinit | 172 | $·sudo·aideinit |
| 171 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 173 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 172 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 174 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 173 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 175 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 174 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 176 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 194, 14 lines modified | Offset 194, 40 lines modified | ||
| 194 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 194 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 195 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 195 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 196 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 196 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 197 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 197 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 198 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 198 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 199 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 199 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 200 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 200 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 202 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 203 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 204 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 205 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 206 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 207 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 208 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 209 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 210 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 211 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 212 | fi | ||
| 213 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 214 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 215 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 216 | fi | ||
| 217 | /usr/sbin/aideinit·-y·-f | ||
| 218 | else | ||
| 219 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 220 | fi | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 222 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 223 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 224 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 225 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 206 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 226 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 207 | ··ansible.builtin.apt: | 227 | ··ansible.builtin.apt: |
| Offset 356, 40 lines modified | Offset 382, 14 lines modified | ||
| 356 | ··-·PCI-DSSv4-11.5.2 | 382 | ··-·PCI-DSSv4-11.5.2 |
| 357 | ··-·aide_build_database | 383 | ··-·aide_build_database |
| 358 | ··-·low_complexity | 384 | ··-·low_complexity |
| 359 | ··-·low_disruption | 385 | ··-·low_disruption |
| 360 | ··-·medium_severity | 386 | ··-·medium_severity |
| 361 | ··-·no_reboot_needed | 387 | ··-·no_reboot_needed |
| 362 | ··-·restrict_strategy | 388 | ··-·restrict_strategy |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 365 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 366 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 367 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| Max diff block lines reached; 1579579/1585877 bytes (99.60%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037dd0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037de0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037de0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037df0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037df0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037e00:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037e00:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037e10:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037e10:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037e20:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037e20:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037e30:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037e30:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037e40:·3 | 00037e40:·352d·3132·2d31·3129·0a20·2020·2020·2020··5-12-11).······· | ||
| 00037e50:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037e50:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037e60:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037e60:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037e70:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037e70:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037e80:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037e80:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037e90:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037e90:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037ea0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037ea0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037eb0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037eb0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15082, 128 lines modified | Offset 15082, 128 lines modified | ||
| 0003ae90:·6574·3d22·2369·646d·3236·3633·2220·7461··et="#idm2663"·ta | 0003ae90:·6574·3d22·2369·646d·3236·3633·2220·7461··et="#idm2663"·ta | ||
| 0003aea0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003aea0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003aeb0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003aeb0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003aec0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003aec0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003aed0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003aed0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003aee0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003aee0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003aef0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003aef0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003af00:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003af10:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003af20:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003af30:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003af40:·2269·646d·3236·3633·223e·3c74·6162·6c65··"idm2663"><table | |||
| 0003af50:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003af60:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003af70:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003af80:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003af90:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003af00:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003af10:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003af20:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003af30:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003af40:·6964·3d22·6964·6d32·3636·3322·3e3c·7461··id="idm2663"><ta | |||
| 0003af50:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003af60:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003af70:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003af80:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003af90:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003afa0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003afb0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003afc0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003af | 0003afa0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003afb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003afc0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003afd0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003afe0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003aff0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b000:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b010:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b020:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b030:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b040:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003b050:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003b060:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003b070:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003b080:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003b090:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003b0a0:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003b0b0:·7265·6e76·205d·3b20·7468·656e·0a0a·4445··renv·];·then..DE | |||
| 0003b0c0:·4249·414e·5f46·524f·4e54·454e·443d·6e6f··BIAN_FRONTEND=no | |||
| 0003b0d0:·6e69·6e74·6572·6163·7469·7665·2061·7074··ninteractive·apt | |||
| 0003b0e0:·2d67·6574·2069·6e73·7461·6c6c·202d·7920··-get·install·-y· | |||
| 0003b0f0:·2261·6964·6522·0a0a·656c·7365·0a20·2020··"aide"..else.··· | |||
| 0003b100:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003b110:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003b120:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003b130:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003b140:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0003b150:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b160:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b170:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b180:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b190:·7461·7267·6574·3d22·2369·646d·3236·3634··target="#idm2664 | |||
| 0003b1a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b1b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b1c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b1d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b1e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b1f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b200:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b210:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b220:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b230:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b240:·7365·2220·6964·3d22·6964·6d32·3636·3422··se"·id="idm2664" | |||
| 0003b250:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b260:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b270:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b280:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b290:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2a0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b2b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b2d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003 | 0003b2e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003 | 0003b2f0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003b300:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b310:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003b320:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003b | 0003b330:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b | 0003b340:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003b | 0003b350:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | ||
| 0003b | 0003b360:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | ||
| 0003b | 0003b370:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | ||
| 0003b | 0003b380:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | ||
| 0003b | 0003b390:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | ||
| 0003b | 0003b3a0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 0003b | 0003b3b0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 0003b | 0003b3c0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | ||
| 0003b | 0003b3d0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | ||
| 0003b | 0003b3e0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | ||
| 0003b | 0003b3f0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | ||
| 0003b | 0003b400:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | ||
| 0003b | 0003b410:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003b | 0003b420:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | ||
| 0003b | 0003b430:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003b | 0003b440:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003b | 0003b450:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | ||
| 0003b | 0003b460:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | ||
| 0003b | 0003b470:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | ||
| 0003b | 0003b480:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | ||
| 0003b | 0003b490:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | ||
| 0003b | 0003b4a0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| Max diff block lines reached; 17501353/17518795 bytes (99.90%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 126, 14 lines modified | Offset 126, 27 lines modified | ||
| 126 | include·install_aide | 126 | include·install_aide |
| 127 | class·install_aide·{ | 127 | class·install_aide·{ |
| 128 | ··package·{·'aide': | 128 | ··package·{·'aide': |
| 129 | ····ensure·=>·'installed', | 129 | ····ensure·=>·'installed', |
| 130 | ··} | 130 | ··} |
| 131 | } | 131 | } |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 139 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 140 | else | ||
| 141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 142 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 148 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 149 | ··package: |
| Offset 152, 27 lines modified | Offset 165, 14 lines modified | ||
| 152 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | [[packages]] | 168 | [[packages]] |
| 156 | name·=·"aide" | 169 | name·=·"aide" |
| 157 | version·=·"*" | 170 | version·=·"*" |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 165 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 166 | else | ||
| 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 168 | fi | ||
| 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 170 | Run·the·following·command·to·generate·a·new·database: | 172 | Run·the·following·command·to·generate·a·new·database: |
| 171 | $·sudo·aideinit | 173 | $·sudo·aideinit |
| 172 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 174 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 173 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 175 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 174 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 176 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 175 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 177 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 195, 14 lines modified | Offset 195, 40 lines modified | ||
| 195 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 195 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 196 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 196 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 197 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 197 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 200 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 200 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 201 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 201 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 203 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 204 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 205 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 206 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 207 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 208 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 209 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 210 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 211 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 212 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 213 | fi | ||
| 214 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 215 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 216 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 217 | fi | ||
| 218 | /usr/sbin/aideinit·-y·-f | ||
| 219 | else | ||
| 220 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 221 | fi | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 207 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 227 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 208 | ··ansible.builtin.apt: | 228 | ··ansible.builtin.apt: |
| Offset 357, 40 lines modified | Offset 383, 14 lines modified | ||
| 357 | ··-·PCI-DSSv4-11.5.2 | 383 | ··-·PCI-DSSv4-11.5.2 |
| 358 | ··-·aide_build_database | 384 | ··-·aide_build_database |
| 359 | ··-·low_complexity | 385 | ··-·low_complexity |
| 360 | ··-·low_disruption | 386 | ··-·low_disruption |
| 361 | ··-·medium_severity | 387 | ··-·medium_severity |
| 362 | ··-·no_reboot_needed | 388 | ··-·no_reboot_needed |
| 363 | ··-·restrict_strategy | 389 | ··-·restrict_strategy |
| 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 365 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 366 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 367 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 368 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| Max diff block lines reached; 1597537/1603972 bytes (99.60%) of diff not shown. | |||
| Offset 14304, 15 lines modified | Offset 14304, 15 lines modified | ||
| 00037df0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037df0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037e00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037e00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037e10:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037e10:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037e20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037e20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037e30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037e30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037e40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037e40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037e50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037e50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037e60:·3 | 00037e60:·352d·3132·2d31·3129·0a20·2020·2020·2020··5-12-11).······· | ||
| 00037e70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037e70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037e80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037e80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037e90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037e90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037ea0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037ea0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037eb0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037eb0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037ec0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037ec0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037ed0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037ed0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15067, 129 lines modified | Offset 15067, 129 lines modified | ||
| 0003ada0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ada0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003adb0:·3d22·2369·646d·3236·3633·2220·7461·6269··="#idm2663"·tabi | 0003adb0:·3d22·2369·646d·3236·3633·2220·7461·6269··="#idm2663"·tabi | ||
| 0003adc0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003adc0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003add0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003add0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ade0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ade0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003adf0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003adf0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ae00:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ae00:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ae10:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ae10:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003ae20:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ae30:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ae40:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ae50:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ae60:·3d22·6964·6d32·3636·3322·3e3c·7461·626c··="idm2663"><tabl | |||
| 0003ae70:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ae80:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ae90:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003aea0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003aeb0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003aec0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003aed0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ae | 0003ae20:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003ae30:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae40:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae50:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae60:·646d·3236·3633·223e·3c74·6162·6c65·2063··dm2663"><table·c | |||
| 0003ae70:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ae80:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ae90:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003aea0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003aeb0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003aec0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003aed0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003aee0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003aef0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003af00:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003af10:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003af20:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003af30:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003a | 0003af40:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003af50:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003af60:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003af70:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003af80:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003af90:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 0003afa0:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 0003afb0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 0003afc0:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 0003afd0:·6e76·205d·3b20·7468·656e·0a0a·4445·4249··nv·];·then..DEBI | |||
| 0003afe0:·414e·5f46·524f·4e54·454e·443d·6e6f·6e69··AN_FRONTEND=noni | |||
| 0003aff0:·6e74·6572·6163·7469·7665·2061·7074·2d67··nteractive·apt-g | |||
| 0003b000:·6574·2069·6e73·7461·6c6c·202d·7920·2261··et·install·-y·"a | |||
| 0003b010:·6964·6522·0a0a·656c·7365·0a20·2020·2026··ide"..else.····& | |||
| 0003b020:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b030:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b040:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b050:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b060:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b070:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b080:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b090:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b0a0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b0b0:·7267·6574·3d22·2369·646d·3236·3634·2220··rget="#idm2664"· | |||
| 0003b0c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b0d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b0e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b0f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b100:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b110:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b120:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b130:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b140:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b150:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b160:·2220·6964·3d22·6964·6d32·3636·3422·3e3c··"·id="idm2664">< | |||
| 0003b170:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b180:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b190:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b1a0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b1b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b1c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b1d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b1f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003 | 0003b200:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003 | 0003b210:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003 | 0003b220:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003b230:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003 | 0003b240:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003 | 0003b250:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003 | 0003b260:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | ||
| 0003 | 0003b270:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | ||
| 0003 | 0003b280:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | ||
| 0003 | 0003b290:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | ||
| 0003a | 0003b2a0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | ||
| 0003 | 0003b2b0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | ||
| 0003 | 0003b2c0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 0003 | 0003b2d0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 0003 | 0003b2e0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 0003 | 0003b2f0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 0003b | 0003b300:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 0003b | 0003b310:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | ||
| 0003b | 0003b320:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | ||
| 0003b | 0003b330:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b | 0003b340:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | ||
| 0003b | 0003b350:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003b | 0003b360:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003b | 0003b370:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | ||
| 0003b | 0003b380:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | ||
| 0003b | 0003b390:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | ||
| 0003b | 0003b3a0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | ||
| 0003b | 0003b3b0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | ||
| 0003b | 0003b3c0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| Max diff block lines reached; 6789410/6806990 bytes (99.74%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 123, 14 lines modified | Offset 123, 27 lines modified | ||
| 123 | include·install_aide | 123 | include·install_aide |
| 124 | class·install_aide·{ | 124 | class·install_aide·{ |
| 125 | ··package·{·'aide': | 125 | ··package·{·'aide': |
| 126 | ····ensure·=>·'installed', | 126 | ····ensure·=>·'installed', |
| 127 | ··} | 127 | ··} |
| 128 | } | 128 | } |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 136 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 137 | else | ||
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 139 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 145 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 146 | ··package: |
| Offset 149, 27 lines modified | Offset 162, 14 lines modified | ||
| 149 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 150 | ··-·package_aide_installed | 163 | ··-·package_aide_installed |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | [[packages]] | 165 | [[packages]] |
| 153 | name·=·"aide" | 166 | name·=·"aide" |
| 154 | version·=·"*" | 167 | version·=·"*" |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 162 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 163 | else | ||
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 165 | fi | ||
| 166 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 168 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 167 | Run·the·following·command·to·generate·a·new·database: | 169 | Run·the·following·command·to·generate·a·new·database: |
| 168 | $·sudo·aideinit | 170 | $·sudo·aideinit |
| 169 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 171 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 170 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 172 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 171 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 173 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 172 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 174 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 192, 14 lines modified | Offset 192, 40 lines modified | ||
| 192 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 192 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 193 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 193 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 194 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 194 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 195 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 195 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 196 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 196 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 197 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 197 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 200 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 201 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 202 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 203 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 204 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 205 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 206 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 207 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 208 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 209 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 210 | fi | ||
| 211 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 212 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 213 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 214 | fi | ||
| 215 | /usr/sbin/aideinit·-y·-f | ||
| 216 | else | ||
| 217 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 218 | fi | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 204 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 224 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 205 | ··ansible.builtin.apt: | 225 | ··ansible.builtin.apt: |
| Offset 354, 40 lines modified | Offset 380, 14 lines modified | ||
| 354 | ··-·PCI-DSSv4-11.5.2 | 380 | ··-·PCI-DSSv4-11.5.2 |
| 355 | ··-·aide_build_database | 381 | ··-·aide_build_database |
| 356 | ··-·low_complexity | 382 | ··-·low_complexity |
| 357 | ··-·low_disruption | 383 | ··-·low_disruption |
| 358 | ··-·medium_severity | 384 | ··-·medium_severity |
| 359 | ··-·no_reboot_needed | 385 | ··-·no_reboot_needed |
| 360 | ··-·restrict_strategy | 386 | ··-·restrict_strategy |
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 362 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 363 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 364 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 365 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| Max diff block lines reached; 865888/872304 bytes (99.26%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 00037e50:·2d3 | 00037e50:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15543, 412 lines modified | Offset 15543, 412 lines modified | ||
| 0003cb60:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003cb60:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003cb70:·6d34·3631·3922·2074·6162·696e·6465·783d··m4619"·tabindex= | 0003cb70:·6d34·3631·3922·2074·6162·696e·6465·783d··m4619"·tabindex= | ||
| 0003cb80:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003cb80:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003cb90:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003cb90:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003cba0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003cba0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003cbb0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003cbb0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (398 lines added, 398 lines removed) | |
| 0003cbc0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003cbc0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003cbd0:·6564·6961·7469·6f6e·20 | 0003cbd0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003cbe0:· | 0003cbe0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003cbf0:·3 | 0003cbf0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003cc00:· | 0003cc00:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003cc10:·6 | 0003cc10:·6170·7365·2220·6964·3d22·6964·6d34·3631··apse"·id="idm461 | ||
| 0003cc20:·3 | 0003cc20:·3922·3e3c·7072·653e·3c63·6f64·653e·2320··9"><pre><code>#· | ||
| 0003cc30:· | 0003cc30:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003cc40:·7 | 0003cc40:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003cc50:· | 0003cc50:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0003cc60:· | 0003cc60:·726d·730a·6966·2064·706b·672d·7175·6572··rms.if·dpkg-quer | ||
| 0003cc70:· | 0003cc70:·7920·2d2d·7368·6f77·202d·2d73·686f·7766··y·--show·--showf | ||
| 0003cc80:· | 0003cc80:·6f72·6d61·743d·2724·7b64·623a·5374·6174··ormat='${db:Stat | ||
| 0003cc90:· | 0003cc90:·7573·2d53·7461·7475·737d·5c6e·2720·276c··us-Status}\n'·'l | ||
| 0003cca0:·696 | 0003cca0:·6962·7061·6d2d·7275·6e74·696d·6527·2032··ibpam-runtime'·2 | ||
| 0003ccb0:·6 | 0003ccb0:·2667·743b·2f64·6576·2f6e·756c·6c20·7c20··>/dev/null·|· | ||
| 0003ccc0:· | 0003ccc0:·6772·6570·202d·7120·696e·7374·616c·6c65··grep·-q·installe | ||
| 0003ccd0:· | 0003ccd0:·643b·2074·6865·6e0a·0a76·6172·5f70·6173··d;·then..var_pas | ||
| 0003cce0:· | 0003cce0:·7377·6f72·645f·7061·6d5f·756e·6978·5f72··sword_pam_unix_r | ||
| 0003ccf0:· | 0003ccf0:·656d·656d·6265·723d·273c·6162·6272·2074··emember='<abbr·t | ||
| 0003cd00:·6 | 0003cd00:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | ||
| 0003cd10:· | 0003cd10:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | ||
| 0003cd20:· | 0003cd20:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | ||
| 0003cd30:·6 | 0003cd30:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | ||
| 0003cd40:·6 | 0003cd40:·6c75·655f·7661·725f·7061·7373·776f·7264··lue_var_password | ||
| 0003cd50:· | 0003cd50:·5f70·616d·5f75·6e69·785f·7265·6d65·6d62··_pam_unix_rememb | ||
| 0003cd60:· | 0003cd60:·6572·223e·323c·2f61·6262·723e·270a·0a0a··er">2</abbr>'... | ||
| 0003cd70:· | 0003cd70:·0a0a·0a0a·6966·205b·202d·6520·222f·6574··....if·[·-e·"/et | ||
| 0003cd80:· | 0003cd80:·632f·7061·6d2e·642f·636f·6d6d·6f6e·2d70··c/pam.d/common-p | ||
| 0003cd90:· | 0003cd90:·6173·7377·6f72·6422·205d·203b·2074·6865··assword"·]·;·the | ||
| 0003cda0:· | 0003cda0:·6e0a·2020·2020·7661·6c75·6552·6567·6578··n.····valueRegex | ||
| 0003cdb0:· | 0003cdb0:·3d22·2476·6172·5f70·6173·7377·6f72·645f··="$var_password_ | ||
| 0003cdc0:· | 0003cdc0:·7061·6d5f·756e·6978·5f72·656d·656d·6265··pam_unix_remembe | ||
| 0003cdd0:· | 0003cdd0:·7222·2064·6566·6175·6c74·5661·6c75·653d··r"·defaultValue= | ||
| 0003cde0:·2 | 0003cde0:·2224·7661·725f·7061·7373·776f·7264·5f70··"$var_password_p | ||
| 0003cdf0:· | 0003cdf0:·616d·5f75·6e69·785f·7265·6d65·6d62·6572··am_unix_remember | ||
| 0003ce00:· | 0003ce00:·220a·2020·2020·2320·6e6f·6e2d·656d·7074··".····#·non-empt | ||
| 0003ce10:· | 0003ce10:·7920·7661·6c75·6573·206e·6565·6420·746f··y·values·need·to | ||
| 0003ce20:·20 | 0003ce20:·2062·6520·7072·6563·6564·6564·2062·7920···be·preceded·by· | ||
| 0003ce30:·61 | 0003ce30:·616e·2065·7175·616c·7320·7369·676e·0a20··an·equals·sign.· | ||
| 0003ce40:· | 0003ce40:·2020·205b·202d·6e20·2224·7b76·616c·7565·····[·-n·"${value | ||
| 0003ce50:· | 0003ce50:·5265·6765·787d·2220·5d20·2661·6d70·3b26··Regex}"·]·&& | ||
| 0003ce60:· | 0003ce60:·616d·703b·2076·616c·7565·5265·6765·783d··amp;·valueRegex= | ||
| 0003ce70:· | 0003ce70:·223d·247b·7661·6c75·6552·6567·6578·7d22··"=${valueRegex}" | ||
| 0003ce80:· | 0003ce80:·0a20·2020·2023·2061·6464·2061·6e20·6571··.····#·add·an·eq | ||
| 0003ce90:· | 0003ce90:·7561·6c73·2073·6967·6e20·746f·206e·6f6e··uals·sign·to·non | ||
| 0003cea0:· | 0003cea0:·2d65·6d70·7479·2076·616c·7565·730a·2020··-empty·values.·· | ||
| 0003ceb0:· | 0003ceb0:·2020·5b20·2d6e·2022·247b·6465·6661·756c····[·-n·"${defaul | ||
| 0003cec0:· | 0003cec0:·7456·616c·7565·7d22·205d·2026·616d·703b··tValue}"·]·& | ||
| 0003ced0:· | 0003ced0:·2661·6d70·3b20·6465·6661·756c·7456·616c··&·defaultVal | ||
| 0003cee0:· | 0003cee0:·7565·3d22·3d24·7b64·6566·6175·6c74·5661··ue="=${defaultVa | ||
| 0003cef0:·6 | 0003cef0:·6c75·657d·220a·0a20·2020·2023·2066·6978··lue}"..····#·fix | ||
| 0003cf00:·202 | 0003cf00:·2027·7479·7065·2720·6966·2069·7427·7320···'type'·if·it's· | ||
| 0003cf10:· | 0003cf10:·7772·6f6e·670a·2020·2020·6966·2067·7265··wrong.····if·gre | ||
| 0003cf20:· | 0003cf20:·7020·2d71·202d·5020·225e·5c5c·732a·283f··p·-q·-P·"^\\s*(? | ||
| 0003cf30:· | 0003cf30:·2227·2127·2270·6173·7377·6f72·645c·5c73··"'!'"password\\s | ||
| 0003cf40:· | 0003cf40:·295b·5b3a·616c·6e75·6d3a·5d5d·2b5c·5c73··)[[:alnum:]]+\\s | ||
| 0003cf50:· | 0003cf50:·2b5b·5b3a·616c·6e75·6d3a·5d5d·2b5c·5c73··+[[:alnum:]]+\\s | ||
| 0003cf60:·616d·5f75·6e69·78 | 0003cf60:·2b70·616d·5f75·6e69·782e·736f·2220·266c··+pam_unix.so"·&l | ||
| 0003cf70:· | 0003cf70:·743b·2022·2f65·7463·2f70·616d·2e64·2f63··t;·"/etc/pam.d/c | ||
| 0003cf80:· | 0003cf80:·6f6d·6d6f·6e2d·7061·7373·776f·7264·2220··ommon-password"· | ||
| 0003cf90:· | 0003cf90:·3b20·7468·656e·0a20·2020·2020·2020·2073··;·then.········s | ||
| 0003cfa0:·6 | 0003cfa0:·6564·202d·2d66·6f6c·6c6f·772d·7379·6d6c··ed·--follow-syml | ||
| 0003cfb0:· | 0003cfb0:·696e·6b73·202d·6920·2d45·202d·6520·2273··inks·-i·-E·-e·"s | ||
| 0003cfc0:· | 0003cfc0:·2f5e·285c·5c73·2a29·5b5b·3a61·6c6e·756d··/^(\\s*)[[:alnum | ||
| 0003cfd0:· | 0003cfd0:·3a5d·5d2b·285c·5c73·2b5b·5b3a·616c·6e75··:]]+(\\s+[[:alnu | ||
| 0003cfe0:·6 | 0003cfe0:·6d3a·5d5d·2b5c·5c73·2b70·616d·5f75·6e69··m:]]+\\s+pam_uni | ||
| 0003cff0:· | 0003cff0:·782e·736f·292f·5c5c·3170·6173·7377·6f72··x.so)/\\1passwor | ||
| 0003d000:· | 0003d000:·645c·5c32·2f22·2022·2f65·7463·2f70·616d··d\\2/"·"/etc/pam | ||
| 0003d010:· | 0003d010:·2e64·2f63·6f6d·6d6f·6e2d·7061·7373·776f··.d/common-passwo | ||
| 0003d020:· | 0003d020:·7264·220a·2020·2020·6669·0a0a·2020·2020··rd".····fi..···· | ||
| 0003d030:· | 0003d030:·2320·6669·7820·2763·6f6e·7472·6f6c·2720··#·fix·'control'· | ||
| 0003d040:·6 | 0003d040:·6966·2069·7427·7320·7772·6f6e·670a·2020··if·it's·wrong.·· | ||
| 0003d050:· | 0003d050:·2020·6966·2067·7265·7020·2d71·202d·5020····if·grep·-q·-P· | ||
| 0003d060:· | 0003d060:·225e·5c5c·732a·7061·7373·776f·7264·5c5c··"^\\s*password\\ | ||
| 0003d070:· | 0003d070:·732b·283f·2227·2127·225c·5b73·7563·6365··s+(?"'!'"\[succe | ||
| 0003d080:· | 0003d080:·7373·3d5b·5b3a·616c·6e75·6d3a·5d5d·2e2a··ss=[[:alnum:]].* | ||
| 0003d090:· | 0003d090:·5c5d·295b·5b3a·616c·6e75·6d3a·5d5d·2b5c··\])[[:alnum:]]+\ | ||
| 0003d0a0:· | 0003d0a0:·5c73·2b70·616d·5f75·6e69·782e·736f·2220··\s+pam_unix.so"· | ||
| 0003d0b0:· | 0003d0b0:·266c·743b·2022·2f65·7463·2f70·616d·2e64··<·"/etc/pam.d | ||
| 0003d0c0:· | 0003d0c0:·2f63·6f6d·6d6f·6e2d·7061·7373·776f·7264··/common-password | ||
| 0003d0d0:·20 | 0003d0d0:·2220·3b20·7468·656e·0a20·2020·2020·2020··"·;·then.······· | ||
| 0003d0e0:· | 0003d0e0:·2073·6564·202d·2d66·6f6c·6c6f·772d·7379···sed·--follow-sy | ||
| 0003d0f0:·6 | 0003d0f0:·6d6c·696e·6b73·202d·6920·2d45·202d·6520··mlinks·-i·-E·-e· | ||
| 0003d100:· | 0003d100:·2273·2f5e·285c·5c73·2a70·6173·7377·6f72··"s/^(\\s*passwor | ||
| 0003d110:·6 | 0003d110:·645c·5c73·2b29·5b5b·3a61·6c6e·756d·3a5d··d\\s+)[[:alnum:] | ||
| 0003d120:· | 0003d120:·5d2b·285c·5c73·2b70·616d·5f75·6e69·782e··]+(\\s+pam_unix. | ||
| 0003d130:· | 0003d130:·736f·292f·5c5c·315c·5b73·7563·6365·7373··so)/\\1\[success | ||
| 0003d140:· | 0003d140:·3d5b·5b3a·616c·6e75·6d3a·5d5d·2e2a·5c5d··=[[:alnum:]].*\] | ||
| 0003d150:· | 0003d150:·5c5c·322f·2220·222f·6574·632f·7061·6d2e··\\2/"·"/etc/pam. | ||
| 0003d160:· | 0003d160:·642f·636f·6d6d·6f6e·2d70·6173·7377·6f72··d/common-passwor | ||
| 0003d170:· | 0003d170:·6422·0a20·2020·2066·690a·0a20·2020·2023··d".····fi..····# | ||
| 0003d180:·2 | 0003d180:·2066·6978·2074·6865·2076·616c·7565·2066···fix·the·value·f | ||
| 0003d190:· | 0003d190:·6f72·2027·6f70·7469·6f6e·2720·6966·206f··or·'option'·if·o | ||
| 0003d1a0:· | 0003d1a0:·6e65·2065·7869·7374·7320·6275·7420·646f··ne·exists·but·do | ||
| 0003d1b0:· | 0003d1b0:·6573·206e·6f74·206d·6174·6368·2027·7661··es·not·match·'va | ||
| 0003d1c0:· | 0003d1c0:·6c75·6552·6567·6578·270a·2020·2020·6966··lueRegex'.····if | ||
| 0003d1d0:·0 | 0003d1d0:·2067·7265·7020·2d71·202d·5020·225e·5c5c···grep·-q·-P·"^\\ | ||
| 0003d1e0:·73 | 0003d1e0:·732a·7061·7373·776f·7264·5c5c·732b·5c5b··s*password\\s+\[ | ||
| 0003d1f0:·7 | 0003d1f0:·7375·6363·6573·733d·5b5b·3a61·6c6e·756d··success=[[:alnum | ||
| 0003d200:· | 0003d200:·3a5d·5d2e·2a5c·5d5c·5c73·2b70·616d·5f75··:]].*\]\\s+pam_u | ||
| 0003d210:· | 0003d210:·6e69·782e·736f·285c·5c73·2e2b·293f·5c5c··nix.so(\\s.+)?\\ | ||
| 0003d220:·7 | 0003d220:·732b·7265·6d65·6d62·6572·283f·2227·2127··s+remember(?"'!' | ||
| Max diff block lines reached; 1291386/1348158 bytes (95.79%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 177, 14 lines modified | Offset 177, 76 lines modified | ||
| 177 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 177 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 178 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(f),·IA-5(1)(e) | 178 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(f),·IA-5(1)(e) |
| 179 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 | 179 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 |
| 180 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.5 | 180 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.5 |
| 181 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000077-GPOS-00045 | 181 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000077-GPOS-00045 |
| 182 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R31 | 182 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R31 |
| 183 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.7 | 183 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.7 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 186 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·| | ||
| 187 | grep·-q·installed;·then | ||
| 188 | var_password_pam_unix_remember='2' | ||
| 189 | if·[·-e·"/etc/pam.d/common-password"·]·;·then | ||
| 190 | ····valueRegex="$var_password_pam_unix_remember" | ||
| 191 | defaultValue="$var_password_pam_unix_remember" | ||
| 192 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 193 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 194 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 195 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 196 | ····#·fix·'type'·if·it's·wrong | ||
| 197 | ····if·grep·-q·-P·"^\\s*(?"'!'"password\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_unix.so"·<·"/ | ||
| 198 | etc/pam.d/common-password"·;·then | ||
| 199 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 200 | ]]+\\s+pam_unix.so)/\\1password\\2/"·"/etc/pam.d/common-password" | ||
| 201 | ····fi | ||
| 202 | ····#·fix·'control'·if·it's·wrong | ||
| 203 | ····if·grep·-q·-P·"^\\s*password\\s+(?"'!'"\[success=[[:alnum:]].*\])[[:alnum: | ||
| 204 | ]]+\\s+pam_unix.so"·<·"/etc/pam.d/common-password"·;·then | ||
| 205 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+)[[:alnum:]]+(\\s+pam_unix.so)/ | ||
| 206 | \\1\[success=[[:alnum:]].*\]\\2/"·"/etc/pam.d/common-password" | ||
| 207 | ····fi | ||
| 208 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 209 | ····if·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 210 | (\\s.+)?\\s+remember(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-password"·;·then | ||
| 211 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 212 | ]].*\]\\s+pam_unix.so(\\s.+)?\\s)remember=[^[:space:]]*/\\1remember${defaultValue}/"·"/etc/ | ||
| 213 | pam.d/common-password" | ||
| 214 | ····#·add·'option=default'·if·option·is·not·set | ||
| 215 | ····elif·grep·-q·-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| 216 | pam.d/common-password"·&& | ||
| 217 | ············grep····-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| 218 | pam.d/common-password"·|·grep·-q·-E·-v·"\\sremember(=|\\s|\$)"·;·then | ||
| 219 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 220 | ]].*\]\\s+pam_unix.so[^\\n]*)/\\1·remember${defaultValue}/"·"/etc/pam.d/common-password" | ||
| 221 | ····#·add·a·new·entry·if·none·exists | ||
| 222 | ····elif·!·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 223 | (\\s.+)?\\s+remember${valueRegex}(\\s|\$)"·<·"/etc/pam.d/common-password"·;·then | ||
| 224 | ········echo·"password·\[success=[[:alnum:]].*\]·pam_unix.so·remember${defaultValue}"·>>·"/ | ||
| 225 | etc/pam.d/common-password" | ||
| 226 | ····fi | ||
| 227 | else | ||
| 228 | ····echo·"/etc/pam.d/common-password·doesn't·exist"·>&2 | ||
| 229 | fi | ||
| 230 | else | ||
| 231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 232 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 189 | -·name:·Gather·the·package·facts | 238 | -·name:·Gather·the·package·facts |
| 190 | ··package_facts: | 239 | ··package_facts: |
| Offset 279, 76 lines modified | Offset 341, 14 lines modified | ||
| 279 | ··-·PCI-DSSv4-8.3.7 | 341 | ··-·PCI-DSSv4-8.3.7 |
| 280 | ··-·accounts_password_pam_unix_remember | 342 | ··-·accounts_password_pam_unix_remember |
| 281 | ··-·configure_strategy | 343 | ··-·configure_strategy |
| 282 | ··-·low_complexity | 344 | ··-·low_complexity |
| 283 | ··-·medium_disruption | 345 | ··-·medium_disruption |
| 284 | ··-·medium_severity | 346 | ··-·medium_severity |
| 285 | ··-·no_reboot_needed | 347 | ··-·no_reboot_needed |
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 287 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 288 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·| | ||
| 289 | grep·-q·installed;·then | ||
| 290 | var_password_pam_unix_remember='2' | ||
| 291 | if·[·-e·"/etc/pam.d/common-password"·]·;·then | ||
| 292 | ····valueRegex="$var_password_pam_unix_remember" | ||
| 293 | defaultValue="$var_password_pam_unix_remember" | ||
| 294 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 295 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 296 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 297 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 298 | ····#·fix·'type'·if·it's·wrong | ||
| 299 | ····if·grep·-q·-P·"^\\s*(?"'!'"password\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_unix.so"·<·"/ | ||
| 300 | etc/pam.d/common-password"·;·then | ||
| 301 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 302 | ]]+\\s+pam_unix.so)/\\1password\\2/"·"/etc/pam.d/common-password" | ||
| 303 | ····fi | ||
| Max diff block lines reached; 101788/109452 bytes (93.00%) of diff not shown. | |||
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037d20:·7320·6f66·2032·3032·3 | 00037d20:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 16001, 146 lines modified | Offset 16001, 146 lines modified | ||
| 0003e800:·6172·6765·743d·2223·6964·6d34·3033·3422··arget="#idm4034" | 0003e800:·6172·6765·743d·2223·6964·6d34·3033·3422··arget="#idm4034" | ||
| 0003e810:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003e810:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003e820:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003e820:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003e830:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003e830:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003e840:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003e840:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003e850:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003e850:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003e860:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003e860:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003e870:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003e880:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003e890:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003e8a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003e8b0:·6964·3d22·6964·6d34·3033·3422·3e3c·7461··id="idm4034"><ta | |||
| 0003e8c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003e8d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003e8e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003e8f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003e900:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003e910:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003e920:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003e930:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003e940:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003e950:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003e960:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003e970:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003e980:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003e990:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003e9a0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003e9b0:·3e3c·636f·6465·3e0a·666f·7220·6620·696e··><code>.for·f·in | |||
| 0003e9c0:·202f·6574·632f·7375·646f·6572·7320·2f65···/etc/sudoers·/e | |||
| 0003e9d0:·7463·2f73·7564·6f65·7273·2e64·2f2a·203b··tc/sudoers.d/*·; | |||
| 0003e9e0:·2064·6f0a·2020·6966·205b·2021·202d·6520···do.··if·[·!·-e· | |||
| 0003e9f0:·2224·6622·205d·203b·2074·6865·6e0a·2020··"$f"·]·;·then.·· | |||
| 0003ea00:·2020·636f·6e74·696e·7565·0a20·2066·690a····continue.··fi. | |||
| 0003ea10:·2020·6d61·7463·6869·6e67·5f6c·6973·743d····matching_list= | |||
| 0003ea20:·2428·6772·6570·202d·5020·275e·283f·2123··$(grep·-P·'^(?!# | |||
| 0003ea30:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | |||
| 0003ea40:·7469·6361·7465·2e2a·2427·2024·6620·7c20··ticate.*$'·$f·|· | |||
| 0003ea50:·756e·6971·2029·0a20·2069·6620·2120·7465··uniq·).··if·!·te | |||
| 0003ea60:·7374·202d·7a20·2224·6d61·7463·6869·6e67··st·-z·"$matching | |||
| 0003ea70:·5f6c·6973·7422·3b20·7468·656e·0a20·2020··_list";·then.··· | |||
| 0003ea80:·2077·6869·6c65·2049·4653·3d20·7265·6164···while·IFS=·read | |||
| 0003ea90:·202d·7220·656e·7472·793b·2064·6f0a·2020···-r·entry;·do.·· | |||
| 0003eaa0:·2020·2020·2320·636f·6d6d·656e·7420·6f75······#·comment·ou | |||
| 0003eab0:·7420·2221·6175·7468·656e·7469·6361·7465··t·"!authenticate | |||
| 0003eac0:·2220·6d61·7463·6865·7320·746f·2070·7265··"·matches·to·pre | |||
| 0003ead0:·7365·7276·6520·7573·6572·2064·6174·610a··serve·user·data. | |||
| 0003eae0:·2020·2020·2020·7365·6420·2d69·2022·732f········sed·-i·"s/ | |||
| 0003eaf0:·5e24·7b65·6e74·7279·7d24·2f23·2026·616d··^${entry}$/#·&am | |||
| 0003eb00:·703b·2f67·2220·2466·0a20·2020·2064·6f6e··p;/g"·$f.····don | |||
| 0003eb10:·6520·266c·743b·266c·743b·266c·743b·2022··e·<<<·" | |||
| 0003eb20:·246d·6174·6368·696e·675f·6c69·7374·220a··$matching_list". | |||
| 0003eb30:·0a20·2020·202f·7573·722f·7362·696e·2f76··.····/usr/sbin/v | |||
| 0003eb40:·6973·7564·6f20·2d63·6620·2466·2026·616d··isudo·-cf·$f·&am | |||
| 0003eb50:·703b·2667·743b·202f·6465·762f·6e75·6c6c··p;>·/dev/null | |||
| 0003eb60:·207c·7c20·6563·686f·2022·4661·696c·2074···||·echo·"Fail·t | |||
| 0003eb70:·6f20·7661·6c69·6461·7465·2024·6620·7769··o·validate·$f·wi | |||
| 0003eb80:·7468·2076·6973·7564·6f22·0a20·2066·690a··th·visudo".··fi. | |||
| 0003eb90:·646f·6e65·0a3c·2f63·6f64·653e·3c2f·7072··done.</code></pr | |||
| 0003eba0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ebb0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ebc0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ebd0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ebe0:·6172·6765·743d·2223·6964·6d34·3033·3522··arget="#idm4035" | |||
| 0003ebf0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003ec00:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003ec10:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003ec20:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003ec30:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003ec40:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003e | 0003ec50:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003e | 0003ec60:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003e | 0003ec70:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003e | 0003ec80:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003e8b0:·6522·2069·643d·2269·646d·3430·3334·223e··e"·id="idm4034"> | |||
| 0003e8c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003e8d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003e8e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003e8f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003e900:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003e910:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003e920:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e930:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003e940:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e950:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003e960:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003e970:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003e980:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003e990:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003e9a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003e9b0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003e9c0:·3a20·4669·6e64·202f·6574·632f·7375·646f··:·Find·/etc/sudo | |||
| 0003e9d0:·6572·732e·642f·2066·696c·6573·0a20·2061··ers.d/·files.··a | |||
| 0003e9e0:·6e73·6962·6c65·2e62·7569·6c74·696e·2e66··nsible.builtin.f | |||
| 0003e9f0:·696e·643a·0a20·2020·2070·6174·6873·3a0a··ind:.····paths:. | |||
| 0003ea00:·2020·2020·2d20·2f65·7463·2f73·7564·6f65······-·/etc/sudoe | |||
| 0003ea10:·7273·2e64·2f0a·2020·7265·6769·7374·6572··rs.d/.··register | |||
| 0003ea20:·3a20·7375·646f·6572·730a·2020·7461·6773··:·sudoers.··tags | |||
| 0003ea30:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003ea40:·332d·434d·2d36·2861·290a·2020·2d20·4e49··3-CM-6(a).··-·NI | |||
| 0003ea50:·5354·2d38·3030·2d35·332d·4941·2d31·310a··ST-800-53-IA-11. | |||
| 0003ea60:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003ea70:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003ea80:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003ea90:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003eaa0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003eab0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003eac0:·7465·6779·0a20·202d·2073·7564·6f5f·7265··tegy.··-·sudo_re | |||
| 0003ead0:·6d6f·7665·5f6e·6f5f·6175·7468·656e·7469··move_no_authenti | |||
| 0003eae0:·6361·7465·0a0a·2d20·6e61·6d65·3a20·5265··cate..-·name:·Re | |||
| 0003eaf0:·6d6f·7665·206c·696e·6573·2063·6f6e·7461··move·lines·conta | |||
| 0003eb00:·696e·696e·6720·2161·7574·6865·6e74·6963··ining·!authentic | |||
| Max diff block lines reached; 909236/929162 bytes (97.86%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:12 | 41 | ····*·cpe:/o:debian:debian_linux:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| Max diff block lines reached; 111135/116868 bytes (95.09%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·313 | 00037d40:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 16021, 146 lines modified | Offset 16021, 146 lines modified | ||
| 0003e940:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 0003e940:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 0003e950:·3033·3422·2074·6162·696e·6465·783d·2230··034"·tabindex="0 | 0003e950:·3033·3422·2074·6162·696e·6465·783d·2230··034"·tabindex="0 | ||
| 0003e960:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003e960:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003e970:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003e970:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003e980:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003e980:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003e990:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003e990:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003e9a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003e9a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003e9b0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003e9c0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003e9d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003e9e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003e9f0:·7365·2220·6964·3d22·6964·6d34·3033·3422··se"·id="idm4034" | |||
| 0003ea00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003ea10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ea20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ea30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ea40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ea50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ea60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ea70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ea80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ea90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003eaa0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003eab0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003eac0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003ead0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 0003eae0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003eaf0:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 0003eb00:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 0003eb10:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 0003eb20:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 0003eb30:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 0003eb40:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 0003eb50:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 0003eb60:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 0003eb70:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 0003eb80:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 0003eb90:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 0003eba0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 0003ebb0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 0003ebc0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 0003ebd0:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 0003ebe0:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 0003ebf0:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 0003ec00:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 0003ec10:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 0003ec20:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 0003ec30:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 0003ec40:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 0003ec50:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 0003ec60:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 0003ec70:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 0003ec80:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 0003ec90:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 0003eca0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 0003ecb0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 0003ecc0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 0003ecd0:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 0003ece0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ecf0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ed00:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ed10:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ed20:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | |||
| 0003ed30:·3033·3522·2074·6162·696e·6465·783d·2230··035"·tabindex="0 | |||
| 0003ed40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ed50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ed60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003ed70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ed80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003e | 0003ed90:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003e | 0003eda0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003e | 0003edb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003e | 0003edc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003e | 0003edd0:·6c61·7073·6522·2069·643d·2269·646d·3430··lapse"·id="idm40 | ||
| 0003ea00:·3334·223e·3c74·6162·6c65·2063·6c61·7373··34"><table·class | |||
| 0003ea10:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ea20:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ea30:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ea40:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ea50:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ea60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ea70:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ea80:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003ea90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003eaa0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003eab0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003eac0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003ead0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 0003eae0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 0003eaf0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003eb00:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 0003eb10:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 0003eb20:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 0003eb30:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 0003eb40:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 0003eb50:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 0003eb60:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 0003eb70:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 0003eb80:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003eb90:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 0003eba0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 0003ebb0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003ebc0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003ebd0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003ebe0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003ebf0:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 0003ec00:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 0003ec10:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 0003ec20:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 0003ec30:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| Max diff block lines reached; 985496/1005560 bytes (98.00%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:12 | 42 | ····*·cpe:/o:debian:debian_linux:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| Max diff block lines reached; 119331/125069 bytes (95.41%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037cd0:·3 | 00037cd0:·352d·3132·2d31·3129·0a20·2020·2020·2020··5-12-11).······· | ||
| 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 14776, 146 lines modified | Offset 14776, 146 lines modified | ||
| 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 00039b80:·3033·3422·2074·6162·696e·6465·783d·2230··034"·tabindex="0 | 00039b80:·3033·3422·2074·6162·696e·6465·783d·2230··034"·tabindex="0 | ||
| 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039be0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039bf0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00039c00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039c10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039c20:·7365·2220·6964·3d22·6964·6d34·3033·3422··se"·id="idm4034" | |||
| 00039c30:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c40:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c50:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039c60:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039c70:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039c80:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039ca0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039cb0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039cd0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039ce0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cf0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039d00:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00039d10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039d20:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 00039d30:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 00039d40:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 00039d50:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 00039d60:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 00039d70:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 00039d80:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 00039d90:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 00039da0:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 00039db0:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 00039dc0:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 00039dd0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 00039de0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 00039df0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 00039e00:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 00039e10:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 00039e20:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 00039e30:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 00039e40:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 00039e50:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 00039e60:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 00039e70:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 00039e80:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 00039e90:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 00039ea0:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 00039eb0:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 00039ec0:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 00039ed0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 00039ee0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 00039ef0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 00039f00:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 00039f10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f50:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | |||
| 00039f60:·3033·3522·2074·6162·696e·6465·783d·2230··035"·tabindex="0 | |||
| 00039f70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039f80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039f90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fa0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039fc0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039 | 00039fd0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039 | 00039fe0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039 | 00039ff0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039c20:·6c61·7073·6522·2069·643d·2269·646d·3430··lapse"·id="idm40 | |||
| 00039c30:·3334·223e·3c74·6162·6c65·2063·6c61·7373··34"><table·class | |||
| 00039c40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039c50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039c60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039c70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039c80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039c90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039ca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039cb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039cc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039cd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039ce0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039cf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039d00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 00039d10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 00039d20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039d30:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 00039d40:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 00039d50:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 00039d60:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 00039d70:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 00039d80:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 00039d90:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 00039da0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00039dc0:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 00039dd0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 00039de0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00039df0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00039e00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00039e10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00039e20:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 00039e30:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 00039e40:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 00039e50:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 00039e60:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| 00039e70:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | |||
| Max diff block lines reached; 283292/303218 bytes (93.43%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:debian:debian_linux:12 | 40 | ····*·cpe:/o:debian:debian_linux:12 |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 91, 14 lines modified | Offset 91, 35 lines modified | ||
| 91 | ···························1.7,·SR·1.8,·SR·1.9 | 91 | ···························1.7,·SR·1.8,·SR·1.9 |
| 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 97 | ···························SRG-OS-000373-GPOS-00158 | 97 | ···························SRG-OS-000373-GPOS-00158 |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 103 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 104 | ··if·[·!·-e·"$f"·]·;·then | ||
| 105 | ····continue | ||
| 106 | ··fi | ||
| 107 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 108 | ··if·!·test·-z·"$matching_list";·then | ||
| 109 | ····while·IFS=·read·-r·entry;·do | ||
| 110 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 111 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 112 | ····done·<<<·"$matching_list" | ||
| 113 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 114 | visudo" | ||
| 115 | ··fi | ||
| 116 | done | ||
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 103 | -·name:·Find·/etc/sudoers.d/·files | 122 | -·name:·Find·/etc/sudoers.d/·files |
| 104 | ··ansible.builtin.find: | 123 | ··ansible.builtin.find: |
| Offset 129, 35 lines modified | Offset 150, 14 lines modified | ||
| 129 | ··-·NIST-800-53-IA-11 | 150 | ··-·NIST-800-53-IA-11 |
| 130 | ··-·low_complexity | 151 | ··-·low_complexity |
| 131 | ··-·low_disruption | 152 | ··-·low_disruption |
| 132 | ··-·medium_severity | 153 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 134 | ··-·restrict_strategy | 155 | ··-·restrict_strategy |
| 135 | ··-·sudo_remove_no_authenticate | 156 | ··-·sudo_remove_no_authenticate |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 141 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 142 | ··if·[·!·-e·"$f"·]·;·then | ||
| 143 | ····continue | ||
| 144 | ··fi | ||
| 145 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 146 | ··if·!·test·-z·"$matching_list";·then | ||
| 147 | ····while·IFS=·read·-r·entry;·do | ||
| 148 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 149 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 150 | ····done·<<<·"$matching_list" | ||
| 151 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 152 | visudo" | ||
| 153 | ··fi | ||
| 154 | done | ||
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 156 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 159 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 158 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 160 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 159 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 161 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 160 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 162 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 161 | ············Without·re-authentication,·users·may·access·resources·or·perform | 163 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 178, 14 lines modified | Offset 178, 35 lines modified | ||
| 178 | ···························1.7,·SR·1.8,·SR·1.9 | 178 | ···························1.7,·SR·1.8,·SR·1.9 |
| 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 184 | ···························SRG-OS-000373-GPOS-00158 | 184 | ···························SRG-OS-000373-GPOS-00158 |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 191 | ··if·[·!·-e·"$f"·]·;·then | ||
| 192 | ····continue | ||
| 193 | ··fi | ||
| 194 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 195 | ··if·!·test·-z·"$matching_list";·then | ||
| 196 | ····while·IFS=·read·-r·entry;·do | ||
| 197 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 198 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 199 | ····done·<<<·"$matching_list" | ||
| 200 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 201 | visudo" | ||
| 202 | ··fi | ||
| 203 | done | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 190 | -·name:·Find·/etc/sudoers.d/·files | 209 | -·name:·Find·/etc/sudoers.d/·files |
| 191 | ··ansible.builtin.find: | 210 | ··ansible.builtin.find: |
| Offset 216, 35 lines modified | Offset 237, 14 lines modified | ||
| 216 | ··-·NIST-800-53-IA-11 | 237 | ··-·NIST-800-53-IA-11 |
| 217 | ··-·low_complexity | 238 | ··-·low_complexity |
| 218 | ··-·low_disruption | 239 | ··-·low_disruption |
| Max diff block lines reached; 37135/42851 bytes (86.66%) of diff not shown. | |||
| Offset 14283, 15 lines modified | Offset 14283, 15 lines modified | ||
| 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037d10:·3 | 00037d10:·352d·3132·2d31·3129·0a20·2020·2020·2020··5-12-11).······· | ||
| 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 16011, 147 lines modified | Offset 16011, 147 lines modified | ||
| 0003e8a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003e8a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003e8b0:·743d·2223·6964·6d34·3033·3422·2074·6162··t="#idm4034"·tab | 0003e8b0:·743d·2223·6964·6d34·3033·3422·2074·6162··t="#idm4034"·tab | ||
| 0003e8c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003e8c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003e8d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003e8d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003e8e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003e8e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003e8f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003e8f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003e900:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003e900:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003e910:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003e920:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003e930:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003e940:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003e950:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003e960:·6964·6d34·3033·3422·3e3c·7461·626c·6520··idm4034"><table· | |||
| 0003e970:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003e980:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003e990:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003e9a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003e9b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003e9c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e9d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003e9e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003e9f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ea00:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ea10:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003ea20:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ea30:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003ea40:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003ea50:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ea60:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 0003ea70:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 0003ea80:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 0003ea90:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 0003eaa0:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 0003eab0:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 0003eac0:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 0003ead0:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 0003eae0:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 0003eaf0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 0003eb00:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 0003eb10:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 0003eb20:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 0003eb30:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 0003eb40:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 0003eb50:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 0003eb60:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 0003eb70:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 0003eb80:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 0003eb90:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 0003eba0:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 0003ebb0:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 0003ebc0:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 0003ebd0:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 0003ebe0:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 0003ebf0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 0003ec00:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 0003ec10:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 0003ec20:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 0003ec30:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 0003ec40:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ec50:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ec60:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ec70:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ec80:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ec90:·743d·2223·6964·6d34·3033·3522·2074·6162··t="#idm4035"·tab | |||
| 0003eca0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ecb0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ecc0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ecd0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ece0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003e | 0003ecf0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003e | 0003ed00:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003e | 0003ed10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003e | 0003ed20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003e | 0003ed30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003e | 0003ed40:·643d·2269·646d·3430·3335·223e·3c74·6162··d="idm4035"><tab | ||
| 0003e | 0003ed50:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003e | 0003ed60:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003e | 0003ed70:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003e | 0003ed80:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003e | 0003ed90:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003e9c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e9d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003e9e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e9f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ea00:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ea10:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003ea20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ea30:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ea40:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003ea50:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ea60:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 0003ea70:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 0003ea80:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 0003ea90:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 0003eaa0:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 0003eab0:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 0003eac0:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 0003ead0:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 0003eae0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003eaf0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 0003eb00:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 0003eb10:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003eb20:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003eb30:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003eb40:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003eb50:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 0003eb60:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 0003eb70:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 0003eb80:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 0003eb90:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 0003eba0:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| Max diff block lines reached; 943378/963442 bytes (97.92%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:12 | 41 | ····*·cpe:/o:debian:debian_linux:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| Max diff block lines reached; 115642/121368 bytes (95.28%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037d30:·3230·323 | 00037d30:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16220, 736 lines modified | Offset 16220, 736 lines modified | ||
| 0003f5b0:·6172·6765·743d·2223·6964·6d31·3033·3533··arget="#idm10353 | 0003f5b0:·6172·6765·743d·2223·6964·6d31·3033·3533··arget="#idm10353 | ||
| 0003f5c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003f5c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003f5d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003f5d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003f5e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003f5e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003f5f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003f5f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003f600:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003f600:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (722 lines added, 722 lines removed) | |
| 0003f610:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003f610:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003f620:·696f·6e20· | 0003f620:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0003f630:· | 0003f630:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003f640:· | 0003f640:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003f650:· | 0003f650:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003f660:· | 0003f660:·2069·643d·2269·646d·3130·3335·3322·3e3c···id="idm10353">< | ||
| 0003f670:·2 | 0003f670:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003f680:· | 0003f680:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003f690:· | 0003f690:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003f6a0:· | 0003f6a0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003f6b0:·6 | 0003f6b0:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | ||
| 0003f6c0:·6 | 0003f6c0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | ||
| 0003f6d0:· | 0003f6d0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | ||
| 0003f6e0:· | 0003f6e0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | ||
| 0003f6f0:· | 0003f6f0:·7468·656e·0a0a·2320·4c69·7374·206f·6620··then..#·List·of· | ||
| 0003f700:· | 0003f700:·6c6f·6720·6669·6c65·2070·6174·6873·2074··log·file·paths·t | ||
| 0003f710:· | 0003f710:·6f20·6265·2069·6e73·7065·6374·6564·2066··o·be·inspected·f | ||
| 0003f720:· | 0003f720:·6f72·2063·6f72·7265·6374·2070·6572·6d69··or·correct·permi | ||
| 0003f730:· | 0003f730:·7373·696f·6e73·0a23·202a·2050·7269·6d61··ssions.#·*·Prima | ||
| 0003f740:· | 0003f740:·7269·6c79·2069·6e73·7065·6374·206c·6f67··rily·inspect·log | ||
| 0003f750:· | 0003f750:·2066·696c·6520·7061·7468·7320·6c69·7374···file·paths·list | ||
| 0003f760:·6 | 0003f760:·6564·2069·6e20·2f65·7463·2f72·7379·736c··ed·in·/etc/rsysl | ||
| 0003f770:· | 0003f770:·6f67·2e63·6f6e·660a·5253·5953·4c4f·475f··og.conf.RSYSLOG_ | ||
| 0003f780:· | 0003f780:·4554·435f·434f·4e46·4947·3d22·2f65·7463··ETC_CONFIG="/etc | ||
| 0003f790:· | 0003f790:·2f72·7379·736c·6f67·2e63·6f6e·6622·0a23··/rsyslog.conf".# | ||
| 0003f7a0:· | 0003f7a0:·202a·2041·6e64·2061·6c73·6f20·7468·6520···*·And·also·the· | ||
| 0003f7b0:· | 0003f7b0:·6c6f·6720·6669·6c65·2070·6174·6873·206c··log·file·paths·l | ||
| 0003f7c0:·6 | 0003f7c0:·6973·7465·6420·6166·7465·7220·7273·7973··isted·after·rsys | ||
| 0003f7d0:·6 | 0003f7d0:·6c6f·6727·7320·2449·6e63·6c75·6465·436f··log's·$IncludeCo | ||
| 0003f7e0:·6 | 0003f7e0:·6e66·6967·2064·6972·6563·7469·7665·0a23··nfig·directive.# | ||
| 0003f7f0:· | 0003f7f0:·2020·2028·7374·6f72·6520·7468·6520·7265·····(store·the·re | ||
| 0003f800:· | 0003f800:·7375·6c74·2069·6e74·6f20·6172·7261·7920··sult·into·array· | ||
| 0003f810:· | 0003f810:·666f·7220·7468·6520·6361·7365·2074·6865··for·the·case·the | ||
| 0003f820:· | 0003f820:·7265·2773·2073·6865·6c6c·2067·6c6f·6220··re's·shell·glob· | ||
| 0003f830:·75 | 0003f830:·7573·6564·2061·7320·7661·6c75·6520·6f66··used·as·value·of | ||
| 0003f840:· | 0003f840:·2049·6e63·6c75·6465·436f·6e66·6967·290a···IncludeConfig). | ||
| 0003f850:· | 0003f850:·7265·6164·6172·7261·7920·2d74·204f·4c44··readarray·-t·OLD | ||
| 0003f860:· | 0003f860:·5f49·4e43·2026·6c74·3b20·266c·743b·2867··_INC·<·<(g | ||
| 0003f870:· | 0003f870:·7265·7020·2d65·2022·5c24·496e·636c·7564··rep·-e·"\$Includ | ||
| 0003f880:· | 0003f880:·6543·6f6e·6669·675b·5b3a·7370·6163·653a··eConfig[[:space: | ||
| 0003f890:· | 0003f890:·5d5d·5c2b·5b5e·5b3a·7370·6163·653a·5d3b··]]\+[^[:space:]; | ||
| 0003f8a0:·5 | 0003f8a0:·5d5c·2b22·202f·6574·632f·7273·7973·6c6f··]\+"·/etc/rsyslo | ||
| 0003f8b0:· | 0003f8b0:·672e·636f·6e66·207c·2063·7574·202d·6420··g.conf·|·cut·-d· | ||
| 0003f8c0:· | 0003f8c0:·2720·2720·2d66·2032·290a·7265·6164·6172··'·'·-f·2).readar | ||
| 0003f8d0:· | 0003f8d0:·7261·7920·2d74·2052·5359·534c·4f47·5f49··ray·-t·RSYSLOG_I | ||
| 0003f8e0:· | 0003f8e0:·4e43·4c55·4445·5f43·4f4e·4649·4720·266c··NCLUDE_CONFIG·&l | ||
| 0003f8f0:· | 0003f8f0:·743b·2026·6c74·3b28·666f·7220·494e·4350··t;·<(for·INCP | ||
| 0003f900:· | 0003f900:·4154·4820·696e·2022·247b·4f4c·445f·494e··ATH·in·"${OLD_IN | ||
| 0003f910:· | 0003f910:·435b·405d·7d22·3b20·646f·2065·7661·6c20··C[@]}";·do·eval· | ||
| 0003f920:· | 0003f920:·7072·696e·7466·2027·2573·5c5c·6e27·2022··printf·'%s\\n'·" | ||
| 0003f930:· | 0003f930:·247b·494e·4350·4154·487d·223b·2064·6f6e··${INCPATH}";·don | ||
| 0003f940:· | 0003f940:·6529·0a72·6561·6461·7272·6179·202d·7420··e).readarray·-t· | ||
| 0003f950:· | 0003f950:·4e45·575f·494e·4320·266c·743b·2026·6c74··NEW_INC·<·< | ||
| 0003f960:· | 0003f960:·3b28·7365·6420·2d6e·2027·2f5e·5c73·2a69··;(sed·-n·'/^\s*i | ||
| 0003f970:·6 | 0003f970:·6e63·6c75·6465·282f·2c2f·292f·4970·2720··nclude(/,/)/Ip'· | ||
| 0003f980:·2 | 0003f980:·2f65·7463·2f72·7379·736c·6f67·2e63·6f6e··/etc/rsyslog.con | ||
| 0003f990:·6 | 0003f990:·6620·7c20·7365·6420·2d6e·2027·7340·2e2a··f·|·sed·-n·'s@.* | ||
| 0003f9a0:·6 | 0003f9a0:·6669·6c65·5c73·2a3d·5c73·2a22·5c28·5b2f··file\s*=\s*"\([/ | ||
| 0003f9b0:· | 0003f9b0:·5b3a·616c·6e75·6d3a·5d5b·3a70·756e·6374··[:alnum:][:punct | ||
| 0003f9c0:· | 0003f9c0:·3a5d·5d2a·5c29·222e·2a40·5c31·4049·7027··:]]*\)".*@\1@Ip' | ||
| 0003f9d0:· | 0003f9d0:·290a·7265·6164·6172·7261·7920·2d74·2052··).readarray·-t·R | ||
| 0003f9e0:· | 0003f9e0:·5359·534c·4f47·5f49·4e43·4c55·4445·2026··SYSLOG_INCLUDE·& | ||
| 0003f9f0:· | 0003f9f0:·6c74·3b20·266c·743b·2866·6f72·2049·4e43··lt;·<(for·INC | ||
| 0003fa00:· | 0003fa00:·5041·5448·2069·6e20·2224·7b4e·4557·5f49··PATH·in·"${NEW_I | ||
| 0003fa10:· | 0003fa10:·4e43·5b40·5d7d·223b·2064·6f20·6576·616c··NC[@]}";·do·eval | ||
| 0003fa20:· | 0003fa20:·2070·7269·6e74·6620·2725·735c·5c6e·2720···printf·'%s\\n'· | ||
| 0003fa30:·2 | 0003fa30:·2224·7b49·4e43·5041·5448·7d22·3b20·646f··"${INCPATH}";·do | ||
| 0003fa40:· | 0003fa40:·6e65·290a·0a23·2044·6563·6c61·7265·2061··ne)..#·Declare·a | ||
| 0003fa50:· | 0003fa50:·6e20·6172·7261·7920·746f·2068·6f6c·6420··n·array·to·hold· | ||
| 0003fa60:·686 | 0003fa60:·7468·6520·6669·6e61·6c20·6c69·7374·206f··the·final·list·o | ||
| 0003fa70:· | 0003fa70:·6620·6469·6666·6572·656e·7420·6c6f·6720··f·different·log· | ||
| 0003fa80:·6 | 0003fa80:·6669·6c65·2070·6174·6873·0a64·6563·6c61··file·paths.decla | ||
| 0003fa90:· | 0003fa90:·7265·202d·6120·4c4f·475f·4649·4c45·5f50··re·-a·LOG_FILE_P | ||
| 0003faa0:· | 0003faa0:·4154·4853·0a0a·2320·4172·7261·7920·746f··ATHS..#·Array·to | ||
| 0003fab0:·2 | 0003fab0:·2068·6f6c·6420·616c·6c20·7273·7973·6c6f···hold·all·rsyslo | ||
| 0003fac0:·6 | 0003fac0:·6720·636f·6e66·6967·2065·6e74·7269·6573··g·config·entries | ||
| 0003fad0:·0a | 0003fad0:·0a52·5359·534c·4f47·5f43·4f4e·4649·4753··.RSYSLOG_CONFIGS | ||
| 0003fae0:· | 0003fae0:·3d28·290a·5253·5953·4c4f·475f·434f·4e46··=().RSYSLOG_CONF | ||
| 0003faf0:· | 0003faf0:·4947·533d·2822·247b·5253·5953·4c4f·475f··IGS=("${RSYSLOG_ | ||
| 0003fb00:· | 0003fb00:·4554·435f·434f·4e46·4947·7d22·2022·247b··ETC_CONFIG}"·"${ | ||
| 0003fb10:· | 0003fb10:·5253·5953·4c4f·475f·494e·434c·5544·455f··RSYSLOG_INCLUDE_ | ||
| 0003fb20:· | 0003fb20:·434f·4e46·4947·5b40·5d7d·2220·2224·7b52··CONFIG[@]}"·"${R | ||
| 0003fb30:· | 0003fb30:·5359·534c·4f47·5f49·4e43·4c55·4445·5b40··SYSLOG_INCLUDE[@ | ||
| 0003fb40:·5 | 0003fb40:·5d7d·2229·0a0a·2320·4765·7420·6675·6c6c··]}")..#·Get·full | ||
| 0003fb50:·6 | 0003fb50:·206c·6973·7420·6f66·2066·696c·6573·2074···list·of·files·t | ||
| 0003fb60:·6 | 0003fb60:·6f20·6265·2063·6865·636b·6564·0a23·2052··o·be·checked.#·R | ||
| 0003fb70:· | 0003fb70:·5359·534c·4f47·5f43·4f4e·4649·4753·206d··SYSLOG_CONFIGS·m | ||
| 0003fb80:· | 0003fb80:·6179·2063·6f6e·7461·696e·2067·6c6f·6273··ay·contain·globs | ||
| 0003fb90:· | 0003fb90:·2073·7563·6820·6173·0a23·202f·6574·632f···such·as.#·/etc/ | ||
| 0003fba0:· | 0003fba0:·7273·7973·6c6f·672e·642f·2a2e·636f·6e66··rsyslog.d/*.conf | ||
| 0003fbb0:· | 0003fbb0:·202f·6574·632f·7273·7973·6c6f·672e·642f···/etc/rsyslog.d/ | ||
| 0003fbc0:· | 0003fbc0:·2a2e·6672·756c·650a·2320·536f·2c20·6c6f··*.frule.#·So,·lo | ||
| 0003fbd0:· | 0003fbd0:·6f70·206f·7665·7220·7468·6520·656e·7472··op·over·the·entr | ||
| 0003fbe0:·6 | 0003fbe0:·6965·7320·696e·2052·5359·534c·4f47·5f43··ies·in·RSYSLOG_C | ||
| 0003fbf0:·4 | 0003fbf0:·4f4e·4649·4753·2061·6e64·2075·7365·2066··ONFIGS·and·use·f | ||
| 0003fc00:· | 0003fc00:·696e·6420·746f·2067·6574·2074·6865·206c··ind·to·get·the·l | ||
| 0003fc10:· | 0003fc10:·6973·7420·6f66·2069·6e63·6c75·6465·6420··ist·of·included· | ||
| 0003fc20:·6 | 0003fc20:·6669·6c65·732e·0a52·5359·534c·4f47·5f43··files..RSYSLOG_C | ||
| 0003fc30:· | 0003fc30:·4f4e·4649·475f·4649·4c45·533d·2829·0a66··ONFIG_FILES=().f | ||
| 0003fc40:· | 0003fc40:·6f72·2045·4e54·5259·2069·6e20·2224·7b52··or·ENTRY·in·"${R | ||
| 0003fc50:· | 0003fc50:·5359·534c·4f47·5f43·4f4e·4649·4753·5b40··SYSLOG_CONFIGS[@ | ||
| 0003fc60:· | 0003fc60:·5d7d·220a·646f·0a09·2320·4966·2064·6972··]}".do..#·If·dir | ||
| 0003fc70:·663 | 0003fc70:·6563·746f·7279·2c20·7273·7973·6c6f·6720··ectory,·rsyslog· | ||
| 0003fc80:·7 | 0003fc80:·7769·6c6c·2073·6561·7263·6820·666f·7220··will·search·for· | ||
| Max diff block lines reached; 808054/909400 bytes (88.86%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·12 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·12 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:12 | 42 | ····*·cpe:/o:debian:debian_linux:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 258, 14 lines modified | Offset 258, 139 lines modified | ||
| 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 267 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 268 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 269 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 270 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 271 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 272 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 273 | of·IncludeConfig) | ||
| 274 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 275 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 276 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 277 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 278 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 279 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 280 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 281 | '%s\\n'·"${INCPATH}";·done) | ||
| 282 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 283 | declare·-a·LOG_FILE_PATHS | ||
| 284 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 285 | RSYSLOG_CONFIGS=() | ||
| 286 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 287 | {RSYSLOG_INCLUDE[@]}") | ||
| 288 | #·Get·full·list·of·files·to·be·checked | ||
| 289 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 290 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 291 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 292 | included·files. | ||
| 293 | RSYSLOG_CONFIG_FILES=() | ||
| 294 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 295 | do | ||
| 296 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 297 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 298 | » if·[·-d·"${ENTRY}"·] | ||
| 299 | » then | ||
| 300 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 301 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 302 | » elif·[·-f·"${ENTRY}"·] | ||
| 303 | » then | ||
| 304 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 305 | » else | ||
| 306 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 307 | » fi | ||
| 308 | done | ||
| 309 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 310 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 311 | configuration) | ||
| 312 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 313 | do | ||
| 314 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 315 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 316 | ('$')·characters, | ||
| 317 | » #·*·Ignore·empty·lines, | ||
| 318 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 319 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 320 | not·log·files | ||
| 321 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 322 | path | ||
| 323 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 324 | all·of·the | ||
| 325 | » #·following·are·met: | ||
| 326 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 327 | » #·*·it·is·preceded·by·space | ||
| 328 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 329 | characters | ||
| 330 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 331 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 332 | » then | ||
| 333 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 334 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 335 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 336 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 337 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 338 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 339 | {FILTERED_PATHS}") | ||
| 340 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 341 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 342 | newline),·split | ||
| 343 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 344 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 345 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 346 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 347 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 348 | » » #·Delete·the·temporary·array | ||
| 349 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 350 | » fi | ||
| 351 | done | ||
| 352 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 353 | grep·regex·is·a·bit | ||
| 354 | #·curly: | ||
| 355 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 356 | #·extract·File="logfile"·expression | ||
| 357 | #·match·only·"logfile"·expression | ||
| 358 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 359 | do | ||
| 360 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 361 | "${LOG_FILE}") | ||
| 362 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| Max diff block lines reached; 106642/113212 bytes (94.20%) of diff not shown. | |||
| Offset 3, 5280 lines modified | Offset 3, 5034 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_password_login_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Disable·SSH·root·Login·with·a·Password·(Insecure)</ocil:title> | ||
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_renameat_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·renameat</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_renameat_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_notifiers_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Enable·checks·on·notifier·call·chains</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_password_login_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_init_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·init</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_init_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_messages_ocil:questionnaire:1"> | ||
| 29 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_keepalive_0_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Set·SSH·Client·Alive·Count·Max·to·zero</ocil:title> | ||
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_keepalive_0_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_ocil:questionnaire:1"> | ||
| 35 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmodat_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchmodat</ocil:title> | ||
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchmodat_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_syslog_ocil:questionnaire:1"> | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_syslog_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Verify·Permissions·on·/var/log/syslog·File</ocil:title> | 35 | ······<ocil:title>Verify·Permissions·on·/var/log/syslog·File</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_syslog_action:testaction:1</ocil:test_action_ref> | 37 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_syslog_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit | 40 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_stig_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 41 | ······<ocil:title>Configure·auditd·Disk·Error·Action·on·Disk·Error</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-audit | 43 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_disk_error_action_stig_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_proc_kcore_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Disable·support·for·/proc/kkcore</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_proc_kcore_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> | ||
| 59 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmod_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchmod</ocil:title> | ||
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchmod_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_sha512_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Sign·kernel·modules·with·SHA-512</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 61 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_sha512_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_randomize_memory_ocil:questionnaire:1"> | ||
| 71 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_max_auth_tries_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Set·SSH·authentication·attempt·limit</ocil:title> | ||
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_max_auth_tries_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-s | 70 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_noexec_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>En | 71 | ······<ocil:title>Ensure·Privileged·Escalated·Commands·Cannot·Execute·Other·Commands·-·sudo·NOEXEC</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-s | 73 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_noexec_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_legacy_ptys_ocil:questionnaire:1"> | ||
| 83 | ····· | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_open_by_handle_at_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·open_by_handle_at</ocil:title> | ||
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_open_by_handle_at_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fremovexattr_ocil:questionnaire:1"> | ||
| 89 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_passwd_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Verify·Group·Who·Owns·passwd·File</ocil:title> | ||
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_init_ocil:questionnaire:1"> | ||
| 95 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_dmesg_restrict_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Restrict·unprivileged·access·to·the·kernel·syslog</ocil:title> | ||
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_dmesg_restrict_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_var_log_messages_ocil:questionnaire:1"> | ||
| 101 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Configure·auditd·max_log_file_action·Upon·Reaching·Maximum·Log·Size</ocil:title> | ||
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_unmap_kernel_at_el0_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Unmap·kernel·when·running·in·userspace·(aka·KAISER)</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_unmap_kernel_at_el0_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_randomize_va_space_ocil:questionnaire:1"> | ||
| 113 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> | ||
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-grub2_rng_core_default_quality_argument_ocil:questionnaire:1"> | ||
| Max diff block lines reached; 703753/715726 bytes (98.33%) of diff not shown. | |||
| Offset 3, 9127 lines modified | Offset 3, 9305 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-package_rsyslog_installed_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Ensure·rsyslog·is·Installed</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-package_rsyslog_installed_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_media_export_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Exporting·to·Media·(successful)</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_media_export_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_d | 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_unprivileged_bpf_disabled_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 11 | ······<ocil:title>Disable·Access·to·Network·bpf()·Syscall·From·Unprivileged·Processes</ocil:title> |
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_d | 13 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_unprivileged_bpf_disabled_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_hash_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 17 | ······<ocil:title>Specify·the·hash·to·use·when·signing·modules</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_hash_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-s | 22 | ····<ocil:questionnaire·id="ocil:ssg-postfix_network_listening_disabled_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Disable· | 23 | ······<ocil:title>Disable·Postfix·Network·Listening</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-s | 25 | ········<ocil:test_action_ref>ocil:ssg-postfix_network_listening_disabled_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_x11_forwarding_ocil:questionnaire:1"> | ||
| 41 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_relayhost_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Configure·System·to·Forward·All·Mail·through·a·specific·host</ocil:title> | ||
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-s | 31 | ········<ocil:test_action_ref>ocil:ssg-postfix_client_configure_relayhost_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-a | 34 | ····<ocil:questionnaire·id="ocil:ssg-package_rsyslog_installed_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure· | 35 | ······<ocil:title>Ensure·rsyslog·is·Installed</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-a | 37 | ········<ocil:test_action_ref>ocil:ssg-package_rsyslog_installed_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_ocil:questionnaire:1"> | ||
| 53 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-security_patches_up_to_date_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·Software·Patches·Installed</ocil:title> | ||
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-s | 43 | ········<ocil:test_action_ref>ocil:ssg-security_patches_up_to_date_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fsetxattr_ocil:questionnaire:1"> | ||
| 59 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-package_syslogng_installed_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·syslog-ng·is·Installed</ocil:title> | ||
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-package_syslogng_installed_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_gshadow_ocil:questionnaire:1"> | ||
| 65 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-package_pam_pwquality_installed_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Install·pam_pwquality·Package</ocil:title> | ||
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-package_pam_pwquality_installed_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-sudo_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_requiretty_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure·Users· | 59 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·requiretty</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-sudo_ | 61 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_requiretty_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_max_sessions_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 65 | ······<ocil:title>Set·SSH·MaxSessions·limit</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_max_sessions_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_randomize_va_space_ocil:questionnaire:1"> | ||
| 83 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-directory_groupowner_etc_ipsecd_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify·Group·Who·Owns·/etc/ipsec.d·Directory</ocil:title> | ||
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-directory_groupowner_etc_ipsecd_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_shadow_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 77 | ······<ocil:title>Verify·User·Who·Owns·shadow·File</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-s | 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_arp_filter_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 83 | ······<ocil:title>Configure·ARP·filtering·for·All·IPv4·Interfaces</ocil:title> |
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-s | 85 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_arp_filter_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_rtr_pref_ocil:questionnaire:1"> | ||
| 101 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-apparmor_configured_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Ensure·AppArmor·is·Active·and·Configured</ocil:title> | ||
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-apparmor_configured_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-co | 94 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_dcredit_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 95 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Digit·Characters</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-co | 97 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_dcredit_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_grub2_cfg_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify· | 101 | ······<ocil:title>Verify·/boot/grub/grub.cfg·Permissions</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ | 103 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_grub2_cfg_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_login_grace_time_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 107 | ······<ocil:title>Ensure·SSH·LoginGraceTime·is·configured</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_login_grace_time_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| Max diff block lines reached; 1183569/1195849 bytes (98.97%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0····165 | 2 | -rw-r--r--···0········0········0····16528·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0·323 | 3 | -rw-r--r--···0········0········0·32344180·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14295, 15 lines modified | Offset 14295, 15 lines modified | ||
| 00037d60:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d60:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037d70:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037d70:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037d80:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037d80:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037d90:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037d90:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037da0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037da0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037db0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037db0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037dc0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037dc0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037dd0:·2032·3032·3 | 00037dd0:·2032·3032·352d·3132·2d31·3129·0a20·2020···2025-12-11).··· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037de0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037df0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037df0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e00:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e00:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e10:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e10:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e20:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e20:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e30:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e30:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e40:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e40:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 16805, 174 lines modified | Offset 16805, 174 lines modified | ||
| 00041a40:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00041a40:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00041a50:·646d·3135·3835·2220·7461·6269·6e64·6578··dm1585"·tabindex | 00041a50:·646d·3135·3835·2220·7461·6269·6e64·6578··dm1585"·tabindex | ||
| 00041a60:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00041a60:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00041a70:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00041a70:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00041a80:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00041a80:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00041a90:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00041a90:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00041aa0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00041aa0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00041ab0:·6d65·6469·6174·696f·6e20· | 00041ab0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 00041ac0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00041ad0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00041ae0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00041af0:·6c61·7073·6522·2069·643d·2269·646d·3135··lapse"·id="idm15 | |||
| 00041ac0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 00041ad0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00041ae0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00041af0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00041b00:·6d31·3538·3522·3e3c·7461·626c·6520·636c··m1585"><table·cl | |||
| 00041b10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00041b20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00041b30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00041b40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00041b50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00041b60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00041b70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00041b80:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00041b90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00041ba0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00041bb0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00041bc0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00041bd0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 00041be0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 00041b | 00041b00:·3835·223e·3c70·7265·3e3c·636f·6465·3e0a··85"><pre><code>. | ||
| 00041 | 00041b10:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | ||
| 00041b20:·6f5f·706f·6c69·6379·3d27·3c61·6262·7220··o_policy='<abbr· | |||
| 00041b30:·7469·746c·653d·2266·726f·6d20·5072·6f66··title="from·Prof | |||
| 00041b40:·696c·652f·7265·6669·6e65·2d76·616c·7565··ile/refine-value | |||
| 00041b50:·3a20·7863·6364·665f·6f72·672e·7373·6770··:·xccdf_org.ssgp | |||
| 00041b60:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f76··roject.content_v | |||
| 00041 | 00041b70:·616c·7565·5f76·6172·5f73·7973·7465·6d5f··alue_var_system_ | ||
| 00041 | 00041b80:·6372·7970·746f·5f70·6f6c·6963·7922·3e44··crypto_policy">D | ||
| 00041b90:·4546·4155·4c54·3c2f·6162·6272·3e27·0a0a··EFAULT</abbr>'.. | |||
| 00041ba0:·0a73·7464·6572·725f·6f66·5f63·616c·6c3d··.stderr_of_call= | |||
| 00041bb0:·2428·7570·6461·7465·2d63·7279·7074·6f2d··$(update-crypto- | |||
| 00041bc0:·706f·6c69·6369·6573·202d·2d73·6574·2024··policies·--set·$ | |||
| 00041c30:·7072·6f6d·6f74·6520·746f·2076·6172·6961··promote·to·varia | |||
| 00041c40:·626c·650a·2020·7365·745f·6661·6374·3a0a··ble.··set_fact:. | |||
| 00041c50:·2020·2020·7661·725f·7379·7374·656d·5f63······var_system_c | |||
| 00041c60:·7279·7074·6f5f·706f·6c69·6379·3a20·2121··rypto_policy:·!! | |||
| 00041c70:·7374·7220·3c61·6262·7220·7469·746c·653d··str·<abbr·title= | |||
| 00041c80:·2266·726f·6d20·5072·6f66·696c·652f·7265··"from·Profile/re | |||
| 00041c90:·6669·6e65·2d76·616c·7565·3a20·7863·6364··fine-value:·xccd | |||
| 00041ca0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | |||
| 00041cb0:·2e63·6f6e·7465·6e74·5f76·616c·7565·5f76··.content_value_v | |||
| 00041cc0:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 00041cd0:·5f70·6f6c·6963·7922·3e44·4546·4155·4c54··_policy">DEFAULT | |||
| 00041ce0:·3c2f·6162·6272·3e0a·2020·7461·6773·3a0a··</abbr>.··tags:. | |||
| 00041cf0:·2020·2020·2d20·616c·7761·7973·0a0a·2d20······-·always..-· | |||
| 00041d00:·6e61·6d65·3a20·436f·6e66·6967·7572·6520··name:·Configure· | |||
| 00041d10:·5379·7374·656d·2043·7279·7074·6f67·7261··System·Cryptogra | |||
| 00041d20:·7068·7920·506f·6c69·6379·0a20·206c·696e··phy·Policy.··lin | |||
| 00041d30:·6569·6e66·696c·653a·0a20·2020·2070·6174··einfile:.····pat | |||
| 00041d40:·683a·202f·6574·632f·6372·7970·746f·2d70··h:·/etc/crypto-p | |||
| 00041d50:·6f6c·6963·6965·732f·636f·6e66·6967·0a20··olicies/config.· | |||
| 00041d60:·2020·2072·6567·6578·703a·205e·283f·2123·····regexp:·^(?!# | |||
| 00041d70:·2928·5c53·2b29·240a·2020·2020·6c69·6e65··)(\S+)$.····line | |||
| 00041d80:·3a20·277b·7b20·7661·725f·7379·7374·656d··:·'{{·var_system | |||
| 00041d90:·5f63·7279·7074·6f5f·706f·6c69·6379·207d··_crypto_policy·} | |||
| 00041da0:·7d27·0a20·2020·2063·7265·6174·653a·2074··}'.····create:·t | |||
| 00041db0:·7275·650a·2020·7461·6773·3a0a·2020·2d20··rue.··tags:.··-· | |||
| 00041dc0:·4e49·5354·2d38·3030·2d35·332d·4143·2d31··NIST-800-53-AC-1 | |||
| 00041dd0:·3728·3229·0a20·202d·204e·4953·542d·3830··7(2).··-·NIST-80 | |||
| 00041de0:·302d·3533·2d41·432d·3137·2861·290a·2020··0-53-AC-17(a).·· | |||
| 00041df0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00041e00:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 00041e10:·3030·2d35·332d·4d41·2d34·2836·290a·2020··00-53-MA-4(6).·· | |||
| 00041e20:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 00041e30:·2d31·3228·3229·0a20·202d·204e·4953·542d··-12(2).··-·NIST- | |||
| 00041e40:·3830·302d·3533·2d53·432d·3132·2833·290a··800-53-SC-12(3). | |||
| 00041e50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00041e60:·5343·2d31·330a·2020·2d20·5043·492d·4453··SC-13.··-·PCI-DS | |||
| 00041e70:·5376·342d·322e·322e·370a·2020·2d20·636f··Sv4-2.2.7.··-·co | |||
| 00041e80:·6e66·6967·7572·655f·6372·7970·746f·5f70··nfigure_crypto_p | |||
| 00041e90:·6f6c·6963·790a·2020·2d20·6869·6768·5f73··olicy.··-·high_s | |||
| 00041ea0:·6576·6572·6974·790a·2020·2d20·6c6f·775f··everity.··-·low_ | |||
| 00041eb0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 00041ec0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 00041ed0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00041ee0:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 00041ef0:·7374·7261·7465·6779·0a0a·2d20·6e61·6d65··strategy..-·name | |||
| 00041f00:·3a20·5665·7269·6679·2074·6861·7420·4372··:·Verify·that·Cr | |||
| 00041f10:·7970·746f·2050·6f6c·6963·7920·6973·2053··ypto·Policy·is·S | |||
| 00041f20:·6574·2028·7275·6e74·696d·6529·0a20·2063··et·(runtime).··c | |||
| 00041f30:·6f6d·6d61·6e64·3a20·2f75·7372·2f62·696e··ommand:·/usr/bin | |||
| 00041f40:·2f75·7064·6174·652d·6372·7970·746f·2d70··/update-crypto-p | |||
| 00041f50:·6f6c·6963·6965·7320·2d2d·7365·7420·7b7b··olicies·--set·{{ | |||
| 00041 | 00041bd0:·7b76·6172·5f73·7973·7465·6d5f·6372·7970··{var_system_cryp | ||
| 00041 | 00041be0:·746f·5f70·6f6c·6963·797d·2032·2667·743b··to_policy}·2> | ||
| 00041f80:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 00041 | 00041bf0:·2661·6d70·3b31·2026·6774·3b20·2f64·6576··&1·>·/dev | ||
| 00041c00:·2f6e·756c·6c29·0a72·633d·243f·0a0a·6966··/null).rc=$?..if | |||
| 00041c10:·2074·6573·7420·2224·7263·2220·3d20·3132···test·"$rc"·=·12 | |||
| 00041c20:·373b·2074·6865·6e0a·0965·6368·6f20·2224··7;·then..echo·"$ | |||
| 00041c30:·7374·6465·7272·5f6f·665f·6361·6c6c·2220··stderr_of_call"· | |||
| 00041c40:·2667·743b·2661·6d70·3b32·0a09·6563·686f··>&2..echo | |||
| 00041c50:·2022·4d61·6b65·2073·7572·6520·7468·6174···"Make·sure·that | |||
| 00041c60:·2074·6865·2073·6372·6970·7420·6973·2069···the·script·is·i | |||
| 00041c70:·6e73·7461·6c6c·6564·206f·6e20·7468·6520··nstalled·on·the· | |||
| 00041c80:·7265·6d65·6469·6174·6564·2073·7973·7465··remediated·syste | |||
| 00041c90:·6d2e·2220·2667·743b·2661·6d70·3b32·0a09··m."·>&2.. | |||
| 00041ca0:·6563·686f·2022·5365·6520·6f75·7470·7574··echo·"See·output | |||
| 00041cb0:·206f·6620·7468·6520·2764·6e66·2070·726f···of·the·'dnf·pro | |||
| Max diff block lines reached; 6197185/6220975 bytes (99.62%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·2·-·Server | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·2·-·Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:amazon:amazon_linux:2023 | 44 | ····*·cpe:/o:amazon:amazon_linux:2023 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 482, 14 lines modified | Offset 482, 33 lines modified | ||
| 482 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 482 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 483 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 483 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 484 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 484 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 485 | ·····················FCS_TLSC_EXT.1 | 485 | ·····················FCS_TLSC_EXT.1 |
| 486 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 486 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 487 | ············_\x8c_\x8i_\x8s······1.9 | 487 | ············_\x8c_\x8i_\x8s······1.9 |
| 488 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 488 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 490 | var_system_crypto_policy='DEFAULT' | ||
| 491 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 492 | rc=$? | ||
| 493 | if·test·"$rc"·=·127;·then | ||
| 494 | » echo·"$stderr_of_call"·>&2 | ||
| 495 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 496 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 497 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 498 | » false··#·end·with·an·error·code | ||
| 499 | elif·test·"$rc"·!=·0;·then | ||
| 500 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 501 | » false··#·end·with·an·error·code | ||
| 502 | fi | ||
| 489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 503 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 490 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 504 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 491 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 505 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 492 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 506 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 493 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 507 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 494 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 508 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 495 | ··set_fact: | 509 | ··set_fact: |
| Offset 532, 33 lines modified | Offset 551, 14 lines modified | ||
| 532 | ··-·PCI-DSSv4-2.2.7 | 551 | ··-·PCI-DSSv4-2.2.7 |
| 533 | ··-·configure_crypto_policy | 552 | ··-·configure_crypto_policy |
| 534 | ··-·high_severity | 553 | ··-·high_severity |
| 535 | ··-·low_complexity | 554 | ··-·low_complexity |
| 536 | ··-·low_disruption | 555 | ··-·low_disruption |
| 537 | ··-·no_reboot_needed | 556 | ··-·no_reboot_needed |
| 538 | ··-·restrict_strategy | 557 | ··-·restrict_strategy |
| 539 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 540 | var_system_crypto_policy='DEFAULT' | ||
| 541 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 542 | rc=$? | ||
| 543 | if·test·"$rc"·=·127;·then | ||
| 544 | » echo·"$stderr_of_call"·>&2 | ||
| 545 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 546 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 547 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 548 | » false··#·end·with·an·error·code | ||
| 549 | elif·test·"$rc"·!=·0;·then | ||
| 550 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 551 | » false··#·end·with·an·error·code | ||
| 552 | fi | ||
| 553 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 558 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 554 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 559 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 555 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto | 560 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto |
| 556 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or | 561 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or |
| 557 | not·set·at·all·in·the·/etc/sysconfig/sshd. | 562 | not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 558 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, | 563 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, |
| 559 | ············and·makes·system·configuration·more·fragmented. | 564 | ············and·makes·system·configuration·more·fragmented. |
| Offset 569, 14 lines modified | Offset 569, 19 lines modified | ||
| 569 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 569 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 570 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 570 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 571 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 571 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 572 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 572 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 573 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 573 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 574 | ············_\x8c_\x8i_\x8s······4.2.14 | 574 | ············_\x8c_\x8i_\x8s······4.2.14 |
| 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 577 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 578 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 579 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 577 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 580 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 578 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 581 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 579 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 582 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 580 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 583 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 581 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 584 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 582 | ··lineinfile: | 585 | ··lineinfile: |
| Offset 593, 19 lines modified | Offset 598, 14 lines modified | ||
| 593 | ··-·PCI-DSSv4-2.2.7 | 598 | ··-·PCI-DSSv4-2.2.7 |
| 594 | ··-·configure_ssh_crypto_policy | 599 | ··-·configure_ssh_crypto_policy |
| 595 | ··-·disable_strategy | 600 | ··-·disable_strategy |
| 596 | ··-·low_complexity | 601 | ··-·low_complexity |
| 597 | ··-·medium_disruption | 602 | ··-·medium_disruption |
| 598 | ··-·medium_severity | 603 | ··-·medium_severity |
| 599 | ··-·reboot_required | 604 | ··-·reboot_required |
| 600 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 601 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 602 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 603 | Group ·Disk·Partitioning· Group·contains·7·rules | 605 | Group ·Disk·Partitioning· Group·contains·7·rules |
| 604 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should·be | 606 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should·be |
| 605 | placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme | 607 | placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme |
| 606 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. | 608 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. |
| 607 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" | 609 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" |
| 608 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already | 610 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already |
| 609 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using | 611 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using |
| Offset 809, 14 lines modified | Offset 809, 45 lines modified | ||
| 809 | ············access·to·the·user's·terminal·after·the·main·program·has·finished·executing. | 809 | ············access·to·the·user's·terminal·after·the·main·program·has·finished·executing. |
| 810 | Severity: ··medium | 810 | Severity: ··medium |
| 811 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_add_use_pty | 811 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_add_use_pty |
| Max diff block lines reached; 683400/689804 bytes (99.07%) of diff not shown. | |||
| Offset 14295, 16 lines modified | Offset 14295, 16 lines modified | ||
| 00037d60:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037d60:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037d70:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037d70:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d80:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d80:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d90:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d90:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037da0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037da0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037db0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037db0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037dc0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037dc0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037dd0:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037dd0:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037de0:·313 | 00037de0:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037df0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037df0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e00:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e00:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e10:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e10:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e20:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e20:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037e30:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037e30:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037e40:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037e40:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037e50:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037e50:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 16778, 174 lines modified | Offset 16778, 174 lines modified | ||
| 00041890:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00041890:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 000418a0:·6d31·3538·3522·2074·6162·696e·6465·783d··m1585"·tabindex= | 000418a0:·6d31·3538·3522·2074·6162·696e·6465·783d··m1585"·tabindex= | ||
| 000418b0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 000418b0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 000418c0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 000418c0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 000418d0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 000418d0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 000418e0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 000418e0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 000418f0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 000418f0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00041900:·6564·6961·7469·6f6e·20 | 00041900:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 00041910:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 00041920:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00041930:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00041940:·6170·7365·2220·6964·3d22·6964·6d31·3538··apse"·id="idm158 | |||
| 00041910:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00041920:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00041930:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00041940:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00041950:·3135·3835·223e·3c74·6162·6c65·2063·6c61··1585"><table·cla | |||
| 00041960:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00041970:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00041980:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00041990:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 000419a0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 000419b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 000419c0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 000419d0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 000419e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000419f0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00041a00:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00041a10:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00041a20:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | |||
| 00041a30:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | |||
| 00041 | 00041950:·3522·3e3c·7072·653e·3c63·6f64·653e·0a76··5"><pre><code>.v | ||
| 00041 | 00041960:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | ||
| 00041970:·5f70·6f6c·6963·793d·273c·6162·6272·2074··_policy='<abbr·t | |||
| 00041980:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | |||
| 00041990:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | |||
| 000419a0:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | |||
| 000419b0:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | |||
| 00041 | 000419c0:·6c75·655f·7661·725f·7379·7374·656d·5f63··lue_var_system_c | ||
| 00041 | 000419d0:·7279·7074·6f5f·706f·6c69·6379·223e·4445··rypto_policy">DE | ||
| 000419e0:·4641·554c·543c·2f61·6262·723e·270a·0a0a··FAULT</abbr>'... | |||
| 000419f0:·7374·6465·7272·5f6f·665f·6361·6c6c·3d24··stderr_of_call=$ | |||
| 00041a00:·2875·7064·6174·652d·6372·7970·746f·2d70··(update-crypto-p | |||
| 00041a80:·726f·6d6f·7465·2074·6f20·7661·7269·6162··romote·to·variab | |||
| 00041a90:·6c65·0a20·2073·6574·5f66·6163·743a·0a20··le.··set_fact:.· | |||
| 00041aa0:·2020·2076·6172·5f73·7973·7465·6d5f·6372·····var_system_cr | |||
| 00041ab0:·7970·746f·5f70·6f6c·6963·793a·2021·2173··ypto_policy:·!!s | |||
| 00041ac0:·7472·203c·6162·6272·2074·6974·6c65·3d22··tr·<abbr·title=" | |||
| 00041ad0:·6672·6f6d·2050·726f·6669·6c65·2f72·6566··from·Profile/ref | |||
| 00041ae0:·696e·652d·7661·6c75·653a·2078·6363·6466··ine-value:·xccdf | |||
| 00041af0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | |||
| 00041b00:·636f·6e74·656e·745f·7661·6c75·655f·7661··content_value_va | |||
| 00041b10:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 00041b20:·706f·6c69·6379·223e·4445·4641·554c·543c··policy">DEFAULT< | |||
| 00041b30:·2f61·6262·723e·0a20·2074·6167·733a·0a20··/abbr>.··tags:.· | |||
| 00041b40:·2020·202d·2061·6c77·6179·730a·0a2d·206e·····-·always..-·n | |||
| 00041b50:·616d·653a·2043·6f6e·6669·6775·7265·2053··ame:·Configure·S | |||
| 00041b60:·7973·7465·6d20·4372·7970·746f·6772·6170··ystem·Cryptograp | |||
| 00041b70:·6879·2050·6f6c·6963·790a·2020·6c69·6e65··hy·Policy.··line | |||
| 00041b80:·696e·6669·6c65·3a0a·2020·2020·7061·7468··infile:.····path | |||
| 00041b90:·3a20·2f65·7463·2f63·7279·7074·6f2d·706f··:·/etc/crypto-po | |||
| 00041ba0:·6c69·6369·6573·2f63·6f6e·6669·670a·2020··licies/config.·· | |||
| 00041bb0:·2020·7265·6765·7870·3a20·5e28·3f21·2329····regexp:·^(?!#) | |||
| 00041bc0:·285c·532b·2924·0a20·2020·206c·696e·653a··(\S+)$.····line: | |||
| 00041bd0:·2027·7b7b·2076·6172·5f73·7973·7465·6d5f···'{{·var_system_ | |||
| 00041be0:·6372·7970·746f·5f70·6f6c·6963·7920·7d7d··crypto_policy·}} | |||
| 00041bf0:·270a·2020·2020·6372·6561·7465·3a20·7472··'.····create:·tr | |||
| 00041c00:·7565·0a20·2074·6167·733a·0a20·202d·204e··ue.··tags:.··-·N | |||
| 00041c10:·4953·542d·3830·302d·3533·2d41·432d·3137··IST-800-53-AC-17 | |||
| 00041c20:·2832·290a·2020·2d20·4e49·5354·2d38·3030··(2).··-·NIST-800 | |||
| 00041c30:·2d35·332d·4143·2d31·3728·6129·0a20·202d··-53-AC-17(a).··- | |||
| 00041c40:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 00041c50:·3628·6129·0a20·202d·204e·4953·542d·3830··6(a).··-·NIST-80 | |||
| 00041c60:·302d·3533·2d4d·412d·3428·3629·0a20·202d··0-53-MA-4(6).··- | |||
| 00041c70:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 00041c80:·3132·2832·290a·2020·2d20·4e49·5354·2d38··12(2).··-·NIST-8 | |||
| 00041c90:·3030·2d35·332d·5343·2d31·3228·3329·0a20··00-53-SC-12(3).· | |||
| 00041ca0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 00041cb0:·432d·3133·0a20·202d·2050·4349·2d44·5353··C-13.··-·PCI-DSS | |||
| 00041cc0:·7634·2d32·2e32·2e37·0a20·202d·2063·6f6e··v4-2.2.7.··-·con | |||
| 00041cd0:·6669·6775·7265·5f63·7279·7074·6f5f·706f··figure_crypto_po | |||
| 00041ce0:·6c69·6379·0a20·202d·2068·6967·685f·7365··licy.··-·high_se | |||
| 00041cf0:·7665·7269·7479·0a20·202d·206c·6f77·5f63··verity.··-·low_c | |||
| 00041d00:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 00041d10:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 00041d20:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 00041d30:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | |||
| 00041d40:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | |||
| 00041d50:·2056·6572·6966·7920·7468·6174·2043·7279···Verify·that·Cry | |||
| 00041d60:·7074·6f20·506f·6c69·6379·2069·7320·5365··pto·Policy·is·Se | |||
| 00041d70:·7420·2872·756e·7469·6d65·290a·2020·636f··t·(runtime).··co | |||
| 00041d80:·6d6d·616e·643a·202f·7573·722f·6269·6e2f··mmand:·/usr/bin/ | |||
| 00041d90:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 00041 | 00041a10:·6f6c·6963·6965·7320·2d2d·7365·7420·247b··olicies·--set·${ | ||
| 00041 | 00041a20:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | ||
| 00041dc0:·6f5f·706f·6c69·6379·207d·7d0a·2020·7461··o_policy·}}.··ta | |||
| 00041dd0:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 00041 | 00041a30:·6f5f·706f·6c69·6379·7d20·3226·6774·3b26··o_policy}·2>& | ||
| 00041a40:·616d·703b·3120·2667·743b·202f·6465·762f··amp;1·>·/dev/ | |||
| 00041a50:·6e75·6c6c·290a·7263·3d24·3f0a·0a69·6620··null).rc=$?..if· | |||
| 00041a60:·7465·7374·2022·2472·6322·203d·2031·3237··test·"$rc"·=·127 | |||
| 00041a70:·3b20·7468·656e·0a09·6563·686f·2022·2473··;·then..echo·"$s | |||
| 00041a80:·7464·6572·725f·6f66·5f63·616c·6c22·2026··tderr_of_call"·& | |||
| 00041a90:·6774·3b26·616d·703b·320a·0965·6368·6f20··gt;&2..echo· | |||
| 00041aa0:·224d·616b·6520·7375·7265·2074·6861·7420··"Make·sure·that· | |||
| 00041ab0:·7468·6520·7363·7269·7074·2069·7320·696e··the·script·is·in | |||
| 00041ac0:·7374·616c·6c65·6420·6f6e·2074·6865·2072··stalled·on·the·r | |||
| 00041ad0:·656d·6564·6961·7465·6420·7379·7374·656d··emediated·system | |||
| 00041ae0:·2e22·2026·6774·3b26·616d·703b·320a·0965··."·>&2..e | |||
| 00041af0:·6368·6f20·2253·6565·206f·7574·7075·7420··cho·"See·output· | |||
| Max diff block lines reached; 5231537/5255465 bytes (99.54%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·1·-·Server | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·1·-·Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:amazon:amazon_linux:2023 | 44 | ····*·cpe:/o:amazon:amazon_linux:2023 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 478, 14 lines modified | Offset 478, 33 lines modified | ||
| 478 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 478 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 479 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 479 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 480 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 480 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 481 | ·····················FCS_TLSC_EXT.1 | 481 | ·····················FCS_TLSC_EXT.1 |
| 482 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 482 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 483 | ············_\x8c_\x8i_\x8s······1.9 | 483 | ············_\x8c_\x8i_\x8s······1.9 |
| 484 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 484 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 486 | var_system_crypto_policy='DEFAULT' | ||
| 487 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 488 | rc=$? | ||
| 489 | if·test·"$rc"·=·127;·then | ||
| 490 | » echo·"$stderr_of_call"·>&2 | ||
| 491 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 492 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 493 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 494 | » false··#·end·with·an·error·code | ||
| 495 | elif·test·"$rc"·!=·0;·then | ||
| 496 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 497 | » false··#·end·with·an·error·code | ||
| 498 | fi | ||
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 499 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 486 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 500 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 487 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 501 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 488 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 502 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 489 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 503 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 490 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 504 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 491 | ··set_fact: | 505 | ··set_fact: |
| Offset 528, 33 lines modified | Offset 547, 14 lines modified | ||
| 528 | ··-·PCI-DSSv4-2.2.7 | 547 | ··-·PCI-DSSv4-2.2.7 |
| 529 | ··-·configure_crypto_policy | 548 | ··-·configure_crypto_policy |
| 530 | ··-·high_severity | 549 | ··-·high_severity |
| 531 | ··-·low_complexity | 550 | ··-·low_complexity |
| 532 | ··-·low_disruption | 551 | ··-·low_disruption |
| 533 | ··-·no_reboot_needed | 552 | ··-·no_reboot_needed |
| 534 | ··-·restrict_strategy | 553 | ··-·restrict_strategy |
| 535 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 536 | var_system_crypto_policy='DEFAULT' | ||
| 537 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 538 | rc=$? | ||
| 539 | if·test·"$rc"·=·127;·then | ||
| 540 | » echo·"$stderr_of_call"·>&2 | ||
| 541 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 542 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 543 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 544 | » false··#·end·with·an·error·code | ||
| 545 | elif·test·"$rc"·!=·0;·then | ||
| 546 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 547 | » false··#·end·with·an·error·code | ||
| 548 | fi | ||
| 549 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 554 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 550 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 555 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 551 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto | 556 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto |
| 552 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or | 557 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or |
| 553 | not·set·at·all·in·the·/etc/sysconfig/sshd. | 558 | not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 554 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, | 559 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, |
| 555 | ············and·makes·system·configuration·more·fragmented. | 560 | ············and·makes·system·configuration·more·fragmented. |
| Offset 565, 14 lines modified | Offset 565, 19 lines modified | ||
| 565 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 565 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 566 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 566 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 567 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 567 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 568 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 568 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 569 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 569 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 570 | ············_\x8c_\x8i_\x8s······4.2.14 | 570 | ············_\x8c_\x8i_\x8s······4.2.14 |
| 571 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 571 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 572 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 573 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 574 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 572 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 573 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 574 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 575 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 576 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 577 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 580 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 578 | ··lineinfile: | 581 | ··lineinfile: |
| Offset 589, 19 lines modified | Offset 594, 14 lines modified | ||
| 589 | ··-·PCI-DSSv4-2.2.7 | 594 | ··-·PCI-DSSv4-2.2.7 |
| 590 | ··-·configure_ssh_crypto_policy | 595 | ··-·configure_ssh_crypto_policy |
| 591 | ··-·disable_strategy | 596 | ··-·disable_strategy |
| 592 | ··-·low_complexity | 597 | ··-·low_complexity |
| 593 | ··-·medium_disruption | 598 | ··-·medium_disruption |
| 594 | ··-·medium_severity | 599 | ··-·medium_severity |
| 595 | ··-·reboot_required | 600 | ··-·reboot_required |
| 596 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 597 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 598 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 599 | Group ·Disk·Partitioning· Group·contains·2·rules | 601 | Group ·Disk·Partitioning· Group·contains·2·rules |
| 600 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should·be | 602 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should·be |
| 601 | placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme | 603 | placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme |
| 602 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. | 604 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. |
| 603 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" | 605 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" |
| 604 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already | 606 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already |
| 605 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using | 607 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using |
| Offset 709, 14 lines modified | Offset 709, 45 lines modified | ||
| 709 | ············access·to·the·user's·terminal·after·the·main·program·has·finished·executing. | 709 | ············access·to·the·user's·terminal·after·the·main·program·has·finished·executing. |
| 710 | Severity: ··medium | 710 | Severity: ··medium |
| 711 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_add_use_pty | 711 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_add_use_pty |
| Max diff block lines reached; 572295/578709 bytes (98.89%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037dc0:·6620·3230·323 | 00037dc0:·6620·3230·3235·2d31·322d·3131·290a·2020··f·2025-12-11).·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 16959, 174 lines modified | Offset 16959, 174 lines modified | ||
| 000423e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 000423e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 000423f0:·6964·6d31·3435·3522·2074·6162·696e·6465··idm1455"·tabinde | 000423f0:·6964·6d31·3435·3522·2074·6162·696e·6465··idm1455"·tabinde | ||
| 00042400:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00042400:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00042410:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00042410:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00042420:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00042420:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00042430:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00042430:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 00042440:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 00042440:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 00042450:·656d·6564·6961·7469·6f6e·20 | 00042450:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 00042460:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 00042470:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00042480:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00042490:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 000424a0:·3435·3522·3e3c·7072·653e·3c63·6f64·653e··455"><pre><code> | |||
| 000424b0:·0a76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 000424c0:·746f·5f70·6f6c·6963·793d·273c·6162·6272··to_policy='<abbr | |||
| 000424d0:·2074·6974·6c65·3d22·6672·6f6d·2050·726f···title="from·Pro | |||
| 000424e0:·6669·6c65·2f72·6566·696e·652d·7661·6c75··file/refine-valu | |||
| 000424f0:·653a·2078·6363·6466·5f6f·7267·2e73·7367··e:·xccdf_org.ssg | |||
| 00042500:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | |||
| 00042460:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 00042470:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00042480:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00042490:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 000424a0:·646d·3134·3535·223e·3c74·6162·6c65·2063··dm1455"><table·c | |||
| 000424b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 000424c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 000424d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 000424e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 000424f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00042500:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00042510:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00042520:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00042530:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00042540:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00042550:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00042560:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00042570:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 00042580:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 00042590:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 000425a0:·653e·2d20·6e61·6d65·3a20·5843·4344·4620··e>-·name:·XCCDF· | |||
| 000425 | 00042510:·7661·6c75·655f·7661·725f·7379·7374·656d··value_var_system | ||
| 000425 | 00042520:·5f63·7279·7074·6f5f·706f·6c69·6379·223e··_crypto_policy"> | ||
| 00042530:·4445·4641·554c·543c·2f61·6262·723e·270a··DEFAULT</abbr>'. | |||
| 00042540:·0a0a·7374·6465·7272·5f6f·665f·6361·6c6c··..stderr_of_call | |||
| 00042550:·3d24·2875·7064·6174·652d·6372·7970·746f··=$(update-crypto | |||
| 00042560:·2d70·6f6c·6963·6965·7320·2d2d·7365·7420··-policies·--set· | |||
| 000425d0:·2070·726f·6d6f·7465·2074·6f20·7661·7269···promote·to·vari | |||
| 000425e0:·6162·6c65·0a20·2073·6574·5f66·6163·743a··able.··set_fact: | |||
| 000425f0:·0a20·2020·2076·6172·5f73·7973·7465·6d5f··.····var_system_ | |||
| 00042600:·6372·7970·746f·5f70·6f6c·6963·793a·2021··crypto_policy:·! | |||
| 00042610:·2173·7472·203c·6162·6272·2074·6974·6c65··!str·<abbr·title | |||
| 00042620:·3d22·6672·6f6d·2050·726f·6669·6c65·2f72··="from·Profile/r | |||
| 00042630:·6566·696e·652d·7661·6c75·653a·2078·6363··efine-value:·xcc | |||
| 00042640:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | |||
| 00042650:·742e·636f·6e74·656e·745f·7661·6c75·655f··t.content_value_ | |||
| 00042660:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 00042670:·6f5f·706f·6c69·6379·223e·4445·4641·554c··o_policy">DEFAUL | |||
| 00042680:·543c·2f61·6262·723e·0a20·2074·6167·733a··T</abbr>.··tags: | |||
| 00042690:·0a20·2020·202d·2061·6c77·6179·730a·0a2d··.····-·always..- | |||
| 000426a0:·206e·616d·653a·2043·6f6e·6669·6775·7265···name:·Configure | |||
| 000426b0:·2053·7973·7465·6d20·4372·7970·746f·6772···System·Cryptogr | |||
| 000426c0:·6170·6879·2050·6f6c·6963·790a·2020·6c69··aphy·Policy.··li | |||
| 000426d0:·6e65·696e·6669·6c65·3a0a·2020·2020·7061··neinfile:.····pa | |||
| 000426e0:·7468·3a20·2f65·7463·2f63·7279·7074·6f2d··th:·/etc/crypto- | |||
| 000426f0:·706f·6c69·6369·6573·2f63·6f6e·6669·670a··policies/config. | |||
| 00042700:·2020·2020·7265·6765·7870·3a20·5e28·3f21······regexp:·^(?! | |||
| 00042710:·2329·285c·532b·2924·0a20·2020·206c·696e··#)(\S+)$.····lin | |||
| 00042720:·653a·2027·7b7b·2076·6172·5f73·7973·7465··e:·'{{·var_syste | |||
| 00042730:·6d5f·6372·7970·746f·5f70·6f6c·6963·7920··m_crypto_policy· | |||
| 00042740:·7d7d·270a·2020·2020·6372·6561·7465·3a20··}}'.····create:· | |||
| 00042750:·7472·7565·0a20·2074·6167·733a·0a20·202d··true.··tags:.··- | |||
| 00042760:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | |||
| 00042770:·3137·2832·290a·2020·2d20·4e49·5354·2d38··17(2).··-·NIST-8 | |||
| 00042780:·3030·2d35·332d·4143·2d31·3728·6129·0a20··00-53-AC-17(a).· | |||
| 00042790:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 000427a0:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 000427b0:·3830·302d·3533·2d4d·412d·3428·3629·0a20··800-53-MA-4(6).· | |||
| 000427c0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 000427d0:·432d·3132·2832·290a·2020·2d20·4e49·5354··C-12(2).··-·NIST | |||
| 000427e0:·2d38·3030·2d35·332d·5343·2d31·3228·3329··-800-53-SC-12(3) | |||
| 000427f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00042800:·2d53·432d·3133·0a20·202d·2050·4349·2d44··-SC-13.··-·PCI-D | |||
| 00042810:·5353·7634·2d32·2e32·2e37·0a20·202d·2063··SSv4-2.2.7.··-·c | |||
| 00042820:·6f6e·6669·6775·7265·5f63·7279·7074·6f5f··onfigure_crypto_ | |||
| 00042830:·706f·6c69·6379·0a20·202d·2068·6967·685f··policy.··-·high_ | |||
| 00042840:·7365·7665·7269·7479·0a20·202d·206c·6f77··severity.··-·low | |||
| 00042850:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 00042860:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 00042870:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 00042880:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | |||
| 00042890:·5f73·7472·6174·6567·790a·0a2d·206e·616d··_strategy..-·nam | |||
| 000428a0:·653a·2056·6572·6966·7920·7468·6174·2043··e:·Verify·that·C | |||
| 000428b0:·7279·7074·6f20·506f·6c69·6379·2069·7320··rypto·Policy·is· | |||
| 000428c0:·5365·7420·2872·756e·7469·6d65·290a·2020··Set·(runtime).·· | |||
| 000428d0:·636f·6d6d·616e·643a·202f·7573·722f·6269··command:·/usr/bi | |||
| 000428e0:·6e2f·7570·6461·7465·2d63·7279·7074·6f2d··n/update-crypto- | |||
| 000428f0:·706f·6c69·6369·6573·202d·2d73·6574·207b··policies·--set·{ | |||
| 00042 | 00042570:·247b·7661·725f·7379·7374·656d·5f63·7279··${var_system_cry | ||
| 00042910:·7074·6f5f·706f·6c69·6379·207d·7d0a·2020··pto_policy·}}.·· | |||
| 00042920:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00042 | 00042580:·7074·6f5f·706f·6c69·6379·7d20·3226·6774··pto_policy}·2> | ||
| 00042590:·3b26·616d·703b·3120·2667·743b·202f·6465··;&1·>·/de | |||
| 000425a0:·762f·6e75·6c6c·290a·7263·3d24·3f0a·0a69··v/null).rc=$?..i | |||
| 000425b0:·6620·7465·7374·2022·2472·6322·203d·2031··f·test·"$rc"·=·1 | |||
| 000425c0:·3237·3b20·7468·656e·0a09·6563·686f·2022··27;·then..echo·" | |||
| 000425d0:·2473·7464·6572·725f·6f66·5f63·616c·6c22··$stderr_of_call" | |||
| 000425e0:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 000425f0:·6f20·224d·616b·6520·7375·7265·2074·6861··o·"Make·sure·tha | |||
| 00042600:·7420·7468·6520·7363·7269·7074·2069·7320··t·the·script·is· | |||
| 00042610:·696e·7374·616c·6c65·6420·6f6e·2074·6865··installed·on·the | |||
| 00042620:·2072·656d·6564·6961·7465·6420·7379·7374···remediated·syst | |||
| Max diff block lines reached; 2146083/2169873 bytes (98.90%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·2 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·2 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 506, 14 lines modified | Offset 506, 33 lines modified | ||
| 506 | ············_\x8i_\x8s_\x8m······1446 | 506 | ············_\x8i_\x8s_\x8m······1446 |
| 507 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 507 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 508 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 508 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 509 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 509 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 510 | ·····················FCS_TLSC_EXT.1 | 510 | ·····················FCS_TLSC_EXT.1 |
| 511 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 511 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 512 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 512 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 513 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 514 | var_system_crypto_policy='DEFAULT' | ||
| 515 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 516 | rc=$? | ||
| 517 | if·test·"$rc"·=·127;·then | ||
| 518 | » echo·"$stderr_of_call"·>&2 | ||
| 519 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 520 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 521 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 522 | » false··#·end·with·an·error·code | ||
| 523 | elif·test·"$rc"·!=·0;·then | ||
| 524 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 525 | » false··#·end·with·an·error·code | ||
| 526 | fi | ||
| 513 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 527 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 514 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 528 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 515 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 529 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 516 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 530 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 517 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 531 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 518 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 532 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 519 | ··set_fact: | 533 | ··set_fact: |
| Offset 556, 33 lines modified | Offset 575, 14 lines modified | ||
| 556 | ··-·PCI-DSSv4-2.2.7 | 575 | ··-·PCI-DSSv4-2.2.7 |
| 557 | ··-·configure_crypto_policy | 576 | ··-·configure_crypto_policy |
| 558 | ··-·high_severity | 577 | ··-·high_severity |
| 559 | ··-·low_complexity | 578 | ··-·low_complexity |
| 560 | ··-·low_disruption | 579 | ··-·low_disruption |
| 561 | ··-·no_reboot_needed | 580 | ··-·no_reboot_needed |
| 562 | ··-·restrict_strategy | 581 | ··-·restrict_strategy |
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 564 | var_system_crypto_policy='DEFAULT' | ||
| 565 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 566 | rc=$? | ||
| 567 | if·test·"$rc"·=·127;·then | ||
| 568 | » echo·"$stderr_of_call"·>&2 | ||
| 569 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 570 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 571 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 572 | » false··#·end·with·an·error·code | ||
| 573 | elif·test·"$rc"·!=·0;·then | ||
| 574 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 575 | » false··#·end·with·an·error·code | ||
| 576 | fi | ||
| 577 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 582 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 578 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 583 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 579 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 584 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| 580 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either | 585 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either |
| 581 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 586 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 582 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 587 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 583 | ············expectations,·and·makes·system·configuration·more·fragmented. | 588 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 593, 14 lines modified | Offset 593, 19 lines modified | ||
| 593 | ·····················(ii) | 593 | ·····················(ii) |
| 594 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 594 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 595 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 595 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 596 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 596 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 597 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 597 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 598 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 598 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 599 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 599 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 600 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 601 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 602 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 600 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 601 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 604 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 602 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 605 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 603 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 606 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 604 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 607 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 605 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 608 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 606 | ··lineinfile: | 609 | ··lineinfile: |
| Offset 617, 19 lines modified | Offset 622, 14 lines modified | ||
| 617 | ··-·PCI-DSSv4-2.2.7 | 622 | ··-·PCI-DSSv4-2.2.7 |
| 618 | ··-·configure_ssh_crypto_policy | 623 | ··-·configure_ssh_crypto_policy |
| 619 | ··-·disable_strategy | 624 | ··-·disable_strategy |
| 620 | ··-·low_complexity | 625 | ··-·low_complexity |
| 621 | ··-·medium_disruption | 626 | ··-·medium_disruption |
| 622 | ··-·medium_severity | 627 | ··-·medium_severity |
| 623 | ··-·reboot_required | 628 | ··-·reboot_required |
| 624 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 625 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 626 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 627 | Group ·Sudo· Group·contains·3·rules | 629 | Group ·Sudo· Group·contains·3·rules |
| 628 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 630 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 629 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 631 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 630 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to | 632 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to |
| 631 | execute. | 633 | execute. |
| 632 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. | 634 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. |
| Offset 640, 14 lines modified | Offset 640, 45 lines modified | ||
| 640 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from | 640 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from |
| 641 | ············retaining·access·to·the·user's·terminal·after·the·main·program·has·finished·executing. | 641 | ············retaining·access·to·the·user's·terminal·after·the·main·program·has·finished·executing. |
| 642 | Severity: ··medium | 642 | Severity: ··medium |
| Max diff block lines reached; 265269/271625 bytes (97.66%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d80:·206f·6620·3230·323 | 00037d80:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16651, 173 lines modified | Offset 16651, 173 lines modified | ||
| 000410a0:·6172·6765·743d·2223·6964·6d31·3435·3522··arget="#idm1455" | 000410a0:·6172·6765·743d·2223·6964·6d31·3435·3522··arget="#idm1455" | ||
| 000410b0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 000410b0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 000410c0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 000410c0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 000410d0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 000410d0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 000410e0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 000410e0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 000410f0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 000410f0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 00041100:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 00041100:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 00041110:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 00041120:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00041130:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00041140:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00041150:·6964·3d22·6964·6d31·3435·3522·3e3c·7072··id="idm1455"><pr | |||
| 00041160:·653e·3c63·6f64·653e·0a76·6172·5f73·7973··e><code>.var_sys | |||
| 00041110:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00041120:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00041130:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00041140:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00041150:·6522·2069·643d·2269·646d·3134·3535·223e··e"·id="idm1455"> | |||
| 00041160:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00041170:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00041180:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00041190:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 000411a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000411b0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 000411c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000411d0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 000411e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 000411f0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00041200:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00041210:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00041220:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00041230:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 00041240:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00041250:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00041260:·3a20·5843·4344·4620·5661·6c75·6520·7661··:·XCCDF·Value·va | |||
| 00041270:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 00041280:·706f·6c69·6379·2023·2070·726f·6d6f·7465··policy·#·promote | |||
| 00041290:·2074·6f20·7661·7269·6162·6c65·0a20·2073···to·variable.··s | |||
| 000412a0:·6574·5f66·6163·743a·0a20·2020·2076·6172··et_fact:.····var | |||
| 00041 | 00041170:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 00041180:·793d·273c·6162·6272·2074·6974·6c65·3d22··y='<abbr·title=" | |||
| 00041190:·6672·6f6d·2042·656e·6368·6d61·726b·2f56··from·Benchmark/V | |||
| 000411a0:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | |||
| 000411b0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | |||
| 000411c0:·6e74·5f76·616c·7565·5f76·6172·5f73·7973··nt_value_var_sys | |||
| 000411d0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 000411e0:·7922·3e44·4546·4155·4c54·3c2f·6162·6272··y">DEFAULT</abbr | |||
| 000411f0:·3e27·0a0a·0a73·7464·6572·725f·6f66·5f63··>'...stderr_of_c | |||
| 00041200:·616c·6c3d·2428·7570·6461·7465·2d63·7279··all=$(update-cry | |||
| 00041210:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 000412c0:·6f6c·6963·793a·2021·2173·7472·203c·6162··olicy:·!!str·<ab | |||
| 000412d0:·6272·2074·6974·6c65·3d22·6672·6f6d·2042··br·title="from·B | |||
| 000412e0:·656e·6368·6d61·726b·2f56·616c·7565·3a20··enchmark/Value:· | |||
| 000412f0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | |||
| 00041300:·6a65·6374·2e63·6f6e·7465·6e74·5f76·616c··ject.content_val | |||
| 00041310:·7565·5f76·6172·5f73·7973·7465·6d5f·6372··ue_var_system_cr | |||
| 00041320:·7970·746f·5f70·6f6c·6963·7922·3e44·4546··ypto_policy">DEF | |||
| 00041330:·4155·4c54·3c2f·6162·6272·3e0a·2020·7461··AULT</abbr>.··ta | |||
| 00041340:·6773·3a0a·2020·2020·2d20·616c·7761·7973··gs:.····-·always | |||
| 00041350:·0a0a·2d20·6e61·6d65·3a20·436f·6e66·6967··..-·name:·Config | |||
| 00041360:·7572·6520·5379·7374·656d·2043·7279·7074··ure·System·Crypt | |||
| 00041370:·6f67·7261·7068·7920·506f·6c69·6379·0a20··ography·Policy.· | |||
| 00041380:·206c·696e·6569·6e66·696c·653a·0a20·2020···lineinfile:.··· | |||
| 00041390:·2070·6174·683a·202f·6574·632f·6372·7970···path:·/etc/cryp | |||
| 000413a0:·746f·2d70·6f6c·6963·6965·732f·636f·6e66··to-policies/conf | |||
| 000413b0:·6967·0a20·2020·2072·6567·6578·703a·205e··ig.····regexp:·^ | |||
| 000413c0:·283f·2123·2928·5c53·2b29·240a·2020·2020··(?!#)(\S+)$.···· | |||
| 000413d0:·6c69·6e65·3a20·277b·7b20·7661·725f·7379··line:·'{{·var_sy | |||
| 000413e0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 000413f0:·6379·207d·7d27·0a20·2020·2063·7265·6174··cy·}}'.····creat | |||
| 00041400:·653a·2074·7275·650a·2020·7461·6773·3a0a··e:·true.··tags:. | |||
| 00041410:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00041420:·4143·2d31·3728·3229·0a20·202d·204e·4953··AC-17(2).··-·NIS | |||
| 00041430:·542d·3830·302d·3533·2d41·432d·3137·2861··T-800-53-AC-17(a | |||
| 00041440:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 00041450:·332d·434d·2d36·2861·290a·2020·2d20·4e49··3-CM-6(a).··-·NI | |||
| 00041460:·5354·2d38·3030·2d35·332d·4d41·2d34·2836··ST-800-53-MA-4(6 | |||
| 00041470:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 00041480:·332d·5343·2d31·3228·3229·0a20·202d·204e··3-SC-12(2).··-·N | |||
| 00041490:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 000414a0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | |||
| 000414b0:·2d35·332d·5343·2d31·330a·2020·2d20·5043··-53-SC-13.··-·PC | |||
| 000414c0:·492d·4453·5376·342d·322e·322e·370a·2020··I-DSSv4-2.2.7.·· | |||
| 000414d0:·2d20·636f·6e66·6967·7572·655f·6372·7970··-·configure_cryp | |||
| 000414e0:·746f·5f70·6f6c·6963·790a·2020·2d20·6869··to_policy.··-·hi | |||
| 000414f0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | |||
| 00041500:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00041510:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00041520:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | |||
| 00041530:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | |||
| 00041540:·6963·745f·7374·7261·7465·6779·0a0a·2d20··ict_strategy..-· | |||
| 00041550:·6e61·6d65·3a20·5665·7269·6679·2074·6861··name:·Verify·tha | |||
| 00041560:·7420·4372·7970·746f·2050·6f6c·6963·7920··t·Crypto·Policy· | |||
| 00041570:·6973·2053·6574·2028·7275·6e74·696d·6529··is·Set·(runtime) | |||
| 00041580:·0a20·2063·6f6d·6d61·6e64·3a20·2f75·7372··.··command:·/usr | |||
| 00041590:·2f62·696e·2f75·7064·6174·652d·6372·7970··/bin/update-cryp | |||
| 000415a0:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 00041 | 00041220:·6574·2024·7b76·6172·5f73·7973·7465·6d5f··et·${var_system_ | ||
| 00041 | 00041230:·6372·7970·746f·5f70·6f6c·6963·797d·2032··crypto_policy}·2 | ||
| 00041240:·2667·743b·2661·6d70·3b31·2026·6774·3b20··>&1·>· | |||
| 00041250:·2f64·6576·2f6e·756c·6c29·0a72·633d·243f··/dev/null).rc=$? | |||
| 00041260:·0a0a·6966·2074·6573·7420·2224·7263·2220··..if·test·"$rc"· | |||
| 00041270:·3d20·3132·373b·2074·6865·6e0a·0965·6368··=·127;·then..ech | |||
| 00041280:·6f20·2224·7374·6465·7272·5f6f·665f·6361··o·"$stderr_of_ca | |||
| 000415d0:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 000415e0:·542d·3830·302d·3533·2d41·432d·3137·2832··T-800-53-AC-17(2 | |||
| 000415f0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 00041600:·332d·4143·2d31·3728·6129·0a20·202d·204e··3-AC-17(a).··-·N | |||
| 00041610:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 00041620:·6129·0a20·202d·204e·4953·542d·3830·302d··a).··-·NIST-800- | |||
| 00041630:·3533·2d4d·412d·3428·3629·0a20·202d·204e··53-MA-4(6).··-·N | |||
| Max diff block lines reached; 89560/113212 bytes (79.11%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·2 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·2 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 50 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 51 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 53 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 389, 14 lines modified | Offset 389, 34 lines modified | ||
| 389 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 389 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 390 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 390 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 391 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, | 391 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, |
| 392 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 | 392 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 393 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- | 393 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- |
| 394 | ·····················GPOS-00174 | 394 | ·····················GPOS-00174 |
| 395 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 395 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 396 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 397 | var_system_crypto_policy='DEFAULT' | ||
| 398 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 399 | null) | ||
| 400 | rc=$? | ||
| 401 | if·test·"$rc"·=·127;·then | ||
| 402 | » echo·"$stderr_of_call"·>&2 | ||
| 403 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 404 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 405 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 406 | » false··#·end·with·an·error·code | ||
| 407 | elif·test·"$rc"·!=·0;·then | ||
| 408 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 409 | » false··#·end·with·an·error·code | ||
| 410 | fi | ||
| 396 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 411 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 397 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 412 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 398 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 413 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 399 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 414 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 400 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 415 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 401 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 416 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 402 | ··set_fact: | 417 | ··set_fact: |
| Offset 439, 34 lines modified | Offset 459, 14 lines modified | ||
| 439 | ··-·PCI-DSSv4-2.2.7 | 459 | ··-·PCI-DSSv4-2.2.7 |
| 440 | ··-·configure_crypto_policy | 460 | ··-·configure_crypto_policy |
| 441 | ··-·high_severity | 461 | ··-·high_severity |
| 442 | ··-·low_complexity | 462 | ··-·low_complexity |
| 443 | ··-·low_disruption | 463 | ··-·low_disruption |
| 444 | ··-·no_reboot_needed | 464 | ··-·no_reboot_needed |
| 445 | ··-·restrict_strategy | 465 | ··-·restrict_strategy |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | var_system_crypto_policy='DEFAULT' | ||
| 448 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 449 | null) | ||
| 450 | rc=$? | ||
| 451 | if·test·"$rc"·=·127;·then | ||
| 452 | » echo·"$stderr_of_call"·>&2 | ||
| 453 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 454 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 455 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 456 | » false··#·end·with·an·error·code | ||
| 457 | elif·test·"$rc"·!=·0;·then | ||
| 458 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 459 | » false··#·end·with·an·error·code | ||
| 460 | fi | ||
| 461 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 466 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 462 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 467 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 463 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up | 468 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up |
| 464 | to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured | 469 | to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured |
| 465 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies | 470 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies |
| 466 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is | 471 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is |
| 467 | configured·to·use·the·system-wide·crypto·policy·settings. | 472 | configured·to·use·the·system-wide·crypto·policy·settings. |
| Offset 474, 14 lines modified | Offset 474, 22 lines modified | ||
| 474 | ············expectations,·and·makes·system·configuration·more·fragmented. | 474 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| 475 | Severity: ··high | 475 | Severity: ··high |
| 476 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy | 476 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy |
| 477 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 | 477 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 |
| 478 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 478 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 479 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 479 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 480 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 | 480 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 |
| 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 486 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 487 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 488 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 489 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 490 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 491 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 492 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 486 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy | 493 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy |
| 487 | ··file: | 494 | ··file: |
| Offset 494, 22 lines modified | Offset 502, 14 lines modified | ||
| 494 | ··-·NIST-800-53-SC-13 | 502 | ··-·NIST-800-53-SC-13 |
| 495 | ··-·configure_kerberos_crypto_policy | 503 | ··-·configure_kerberos_crypto_policy |
| 496 | ··-·configure_strategy | 504 | ··-·configure_strategy |
| 497 | ··-·high_severity | 505 | ··-·high_severity |
| 498 | ··-·low_complexity | 506 | ··-·low_complexity |
| 499 | ··-·low_disruption | 507 | ··-·low_disruption |
| 500 | ··-·reboot_required | 508 | ··-·reboot_required |
| 501 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 502 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 503 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 504 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 505 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 506 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 507 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 508 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 509 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 509 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 510 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 510 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan | 511 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan |
| Max diff block lines reached; 10532/16779 bytes (62.77%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037dc0:·6620·3230·323 | 00037dc0:·6620·3230·3235·2d31·322d·3131·290a·2020··f·2025-12-11).·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 16888, 173 lines modified | Offset 16888, 173 lines modified | ||
| 00041f70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00041f70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00041f80:·3436·3322·2074·6162·696e·6465·783d·2230··463"·tabindex="0 | 00041f80:·3436·3322·2074·6162·696e·6465·783d·2230··463"·tabindex="0 | ||
| 00041f90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00041f90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00041fa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00041fa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00041fb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00041fb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00041fc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00041fc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00041fd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00041fd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00041fe0:·6961·7469·6f6e·20 | 00041fe0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 00041ff0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00042000:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00042010:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00042020:·7365·2220·6964·3d22·6964·6d31·3436·3322··se"·id="idm1463" | |||
| 00041ff0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00042000:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00042010:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00042020:·6c61·7073·6522·2069·643d·2269·646d·3134··lapse"·id="idm14 | |||
| 00042030:·3633·223e·3c74·6162·6c65·2063·6c61·7373··63"><table·class | |||
| 00042040:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00042050:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00042060:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00042070:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00042080:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00042090:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000420a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 000420b0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 000420c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000420d0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 000420e0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 000420f0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00042100:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 00042110:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 00042 | 00042030:·3e3c·7072·653e·3c63·6f64·653e·0a76·6172··><pre><code>.var | ||
| 00042 | 00042040:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | ||
| 00042050:·6f6c·6963·793d·273c·6162·6272·2074·6974··olicy='<abbr·tit | |||
| 00042060:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 00042070:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 00042080:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 00042090:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 00042 | 000420a0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | ||
| 00042 | 000420b0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | ||
| 000420c0:·554c·543c·2f61·6262·723e·270a·0a0a·7374··ULT</abbr>'...st | |||
| 000420d0:·6465·7272·5f6f·665f·6361·6c6c·3d24·2875··derr_of_call=$(u | |||
| 000420e0:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 00042160:·6d6f·7465·2074·6f20·7661·7269·6162·6c65··mote·to·variable | |||
| 00042170:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | |||
| 00042180:·2076·6172·5f73·7973·7465·6d5f·6372·7970···var_system_cryp | |||
| 00042190:·746f·5f70·6f6c·6963·793a·2021·2173·7472··to_policy:·!!str | |||
| 000421a0:·203c·6162·6272·2074·6974·6c65·3d22·6672···<abbr·title="fr | |||
| 000421b0:·6f6d·2050·726f·6669·6c65·2f72·6566·696e··om·Profile/refin | |||
| 000421c0:·652d·7661·6c75·653a·2078·6363·6466·5f6f··e-value:·xccdf_o | |||
| 000421d0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | |||
| 000421e0:·6e74·656e·745f·7661·6c75·655f·7661·725f··ntent_value_var_ | |||
| 000421f0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 00042200:·6c69·6379·223e·4445·4641·554c·543c·2f61··licy">DEFAULT</a | |||
| 00042210:·6262·723e·0a20·2074·6167·733a·0a20·2020··bbr>.··tags:.··· | |||
| 00042220:·202d·2061·6c77·6179·730a·0a2d·206e·616d···-·always..-·nam | |||
| 00042230:·653a·2043·6f6e·6669·6775·7265·2053·7973··e:·Configure·Sys | |||
| 00042240:·7465·6d20·4372·7970·746f·6772·6170·6879··tem·Cryptography | |||
| 00042250:·2050·6f6c·6963·790a·2020·6c69·6e65·696e···Policy.··linein | |||
| 00042260:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | |||
| 00042270:·2f65·7463·2f63·7279·7074·6f2d·706f·6c69··/etc/crypto-poli | |||
| 00042280:·6369·6573·2f63·6f6e·6669·670a·2020·2020··cies/config.···· | |||
| 00042290:·7265·6765·7870·3a20·5e28·3f21·2329·285c··regexp:·^(?!#)(\ | |||
| 000422a0:·532b·2924·0a20·2020·206c·696e·653a·2027··S+)$.····line:·' | |||
| 000422b0:·7b7b·2076·6172·5f73·7973·7465·6d5f·6372··{{·var_system_cr | |||
| 000422c0:·7970·746f·5f70·6f6c·6963·7920·7d7d·270a··ypto_policy·}}'. | |||
| 000422d0:·2020·2020·6372·6561·7465·3a20·7472·7565······create:·true | |||
| 000422e0:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 000422f0:·542d·3830·302d·3533·2d41·432d·3137·2832··T-800-53-AC-17(2 | |||
| 00042300:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 00042310:·332d·4143·2d31·3728·6129·0a20·202d·204e··3-AC-17(a).··-·N | |||
| 00042320:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 00042330:·6129·0a20·202d·204e·4953·542d·3830·302d··a).··-·NIST-800- | |||
| 00042340:·3533·2d4d·412d·3428·3629·0a20·202d·204e··53-MA-4(6).··-·N | |||
| 00042350:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 00042360:·2832·290a·2020·2d20·4e49·5354·2d38·3030··(2).··-·NIST-800 | |||
| 00042370:·2d35·332d·5343·2d31·3228·3329·0a20·202d··-53-SC-12(3).··- | |||
| 00042380:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 00042390:·3133·0a20·202d·2050·4349·2d44·5353·7634··13.··-·PCI-DSSv4 | |||
| 000423a0:·2d32·2e32·2e37·0a20·202d·2063·6f6e·6669··-2.2.7.··-·confi | |||
| 000423b0:·6775·7265·5f63·7279·7074·6f5f·706f·6c69··gure_crypto_poli | |||
| 000423c0:·6379·0a20·202d·2068·6967·685f·7365·7665··cy.··-·high_seve | |||
| 000423d0:·7269·7479·0a20·202d·206c·6f77·5f63·6f6d··rity.··-·low_com | |||
| 000423e0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 000423f0:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | |||
| 00042400:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 00042410:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | |||
| 00042420:·6174·6567·790a·0a2d·206e·616d·653a·2056··ategy..-·name:·V | |||
| 00042430:·6572·6966·7920·7468·6174·2043·7279·7074··erify·that·Crypt | |||
| 00042440:·6f20·506f·6c69·6379·2069·7320·5365·7420··o·Policy·is·Set· | |||
| 00042450:·2872·756e·7469·6d65·290a·2020·636f·6d6d··(runtime).··comm | |||
| 00042460:·616e·643a·202f·7573·722f·6269·6e2f·7570··and:·/usr/bin/up | |||
| 00042470:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 00042 | 000420f0:·6963·6965·7320·2d2d·7365·7420·247b·7661··icies·--set·${va | ||
| 00042 | 00042100:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | ||
| 000424a0:·706f·6c69·6379·207d·7d0a·2020·7461·6773··policy·}}.··tags | |||
| 000424b0:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 00042 | 00042110:·706f·6c69·6379·7d20·3226·6774·3b26·616d··policy}·2>&am | ||
| 00042120:·703b·3120·2667·743b·202f·6465·762f·6e75··p;1·>·/dev/nu | |||
| 00042130:·6c6c·290a·7263·3d24·3f0a·0a69·6620·7465··ll).rc=$?..if·te | |||
| 00042140:·7374·2022·2472·6322·203d·2031·3237·3b20··st·"$rc"·=·127;· | |||
| 00042150:·7468·656e·0a09·6563·686f·2022·2473·7464··then..echo·"$std | |||
| 00042160:·6572·725f·6f66·5f63·616c·6c22·2026·6774··err_of_call"·> | |||
| 00042170:·3b26·616d·703b·320a·0965·6368·6f20·224d··;&2..echo·"M | |||
| 00042180:·616b·6520·7375·7265·2074·6861·7420·7468··ake·sure·that·th | |||
| 00042190:·6520·7363·7269·7074·2069·7320·696e·7374··e·script·is·inst | |||
| 000421a0:·616c·6c65·6420·6f6e·2074·6865·2072·656d··alled·on·the·rem | |||
| 000421b0:·6564·6961·7465·6420·7379·7374·656d·2e22··ediated·system." | |||
| 000421c0:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 000421d0:·6f20·2253·6565·206f·7574·7075·7420·6f66··o·"See·output·of | |||
| 000421e0:·2074·6865·2027·646e·6620·7072·6f76·6964···the·'dnf·provid | |||
| Max diff block lines reached; 2055857/2079509 bytes (98.86%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·3 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·3 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 441, 14 lines modified | Offset 441, 33 lines modified | ||
| 441 | ············_\x8i_\x8s_\x8m······1446 | 441 | ············_\x8i_\x8s_\x8m······1446 |
| 442 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 442 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 443 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 443 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 444 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 444 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 445 | ·····················FCS_TLSC_EXT.1 | 445 | ·····················FCS_TLSC_EXT.1 |
| 446 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 446 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 447 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 447 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 449 | var_system_crypto_policy='DEFAULT' | ||
| 450 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 451 | rc=$? | ||
| 452 | if·test·"$rc"·=·127;·then | ||
| 453 | » echo·"$stderr_of_call"·>&2 | ||
| 454 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 455 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 456 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 457 | » false··#·end·with·an·error·code | ||
| 458 | elif·test·"$rc"·!=·0;·then | ||
| 459 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 460 | » false··#·end·with·an·error·code | ||
| 461 | fi | ||
| 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 453 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 467 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 454 | ··set_fact: | 468 | ··set_fact: |
| Offset 491, 33 lines modified | Offset 510, 14 lines modified | ||
| 491 | ··-·PCI-DSSv4-2.2.7 | 510 | ··-·PCI-DSSv4-2.2.7 |
| 492 | ··-·configure_crypto_policy | 511 | ··-·configure_crypto_policy |
| 493 | ··-·high_severity | 512 | ··-·high_severity |
| 494 | ··-·low_complexity | 513 | ··-·low_complexity |
| 495 | ··-·low_disruption | 514 | ··-·low_disruption |
| 496 | ··-·no_reboot_needed | 515 | ··-·no_reboot_needed |
| 497 | ··-·restrict_strategy | 516 | ··-·restrict_strategy |
| 498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 499 | var_system_crypto_policy='DEFAULT' | ||
| 500 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 501 | rc=$? | ||
| 502 | if·test·"$rc"·=·127;·then | ||
| 503 | » echo·"$stderr_of_call"·>&2 | ||
| 504 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 505 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 506 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 507 | » false··#·end·with·an·error·code | ||
| 508 | elif·test·"$rc"·!=·0;·then | ||
| 509 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 510 | » false··#·end·with·an·error·code | ||
| 511 | fi | ||
| 512 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 517 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 513 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 518 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 514 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 519 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| 515 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either | 520 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either |
| 516 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 521 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 517 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 522 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 518 | ············expectations,·and·makes·system·configuration·more·fragmented. | 523 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 528, 14 lines modified | Offset 528, 19 lines modified | ||
| 528 | ·····················(ii) | 528 | ·····················(ii) |
| 529 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 529 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 530 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 530 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 531 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 531 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 532 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 532 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 533 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 533 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 534 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 534 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 535 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 536 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 537 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 535 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 536 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 539 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 537 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 540 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 538 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 541 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 539 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 542 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 540 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 543 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 541 | ··lineinfile: | 544 | ··lineinfile: |
| Offset 552, 19 lines modified | Offset 557, 14 lines modified | ||
| 552 | ··-·PCI-DSSv4-2.2.7 | 557 | ··-·PCI-DSSv4-2.2.7 |
| 553 | ··-·configure_ssh_crypto_policy | 558 | ··-·configure_ssh_crypto_policy |
| 554 | ··-·disable_strategy | 559 | ··-·disable_strategy |
| 555 | ··-·low_complexity | 560 | ··-·low_complexity |
| 556 | ··-·medium_disruption | 561 | ··-·medium_disruption |
| 557 | ··-·medium_severity | 562 | ··-·medium_severity |
| 558 | ··-·reboot_required | 563 | ··-·reboot_required |
| 559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 560 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 561 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 562 | Group ·Sudo· Group·contains·4·rules | 564 | Group ·Sudo· Group·contains·4·rules |
| 563 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 565 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 564 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 566 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 565 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to | 567 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to |
| 566 | execute. | 568 | execute. |
| 567 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. | 569 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. |
| Offset 625, 14 lines modified | Offset 625, 45 lines modified | ||
| 625 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from | 625 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from |
| 626 | ············retaining·access·to·the·user's·terminal·after·the·main·program·has·finished·executing. | 626 | ············retaining·access·to·the·user's·terminal·after·the·main·program·has·finished·executing. |
| 627 | Severity: ··medium | 627 | Severity: ··medium |
| Max diff block lines reached; 247806/254162 bytes (97.50%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d80:·206f·6620·3230·323 | 00037d80:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16133, 173 lines modified | Offset 16133, 173 lines modified | ||
| 0003f040:·6172·6765·743d·2223·6964·6d31·3436·3322··arget="#idm1463" | 0003f040:·6172·6765·743d·2223·6964·6d31·3436·3322··arget="#idm1463" | ||
| 0003f050:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003f050:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003f060:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003f060:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003f070:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003f070:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003f080:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003f080:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003f090:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003f090:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003f0a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003f0a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003f0b0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003f0c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003f0d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003f0e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003f0f0:·6522·2069·643d·2269·646d·3134·3633·223e··e"·id="idm1463"> | |||
| 0003f100:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003f110:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003f120:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003f130:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003f140:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003f150:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003f160:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003f | 0003f0b0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | ||
| 0003f0c0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003f0d0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003f0e0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003f0f0:·6964·3d22·6964·6d31·3436·3322·3e3c·7072··id="idm1463"><pr | |||
| 0003f100:·653e·3c63·6f64·653e·0a76·6172·5f73·7973··e><code>.var_sys | |||
| 0003f110:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003f120:·793d·273c·6162·6272·2074·6974·6c65·3d22··y='<abbr·title=" | |||
| 0003f130:·6672·6f6d·2042·656e·6368·6d61·726b·2f56··from·Benchmark/V | |||
| 0003f140:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | |||
| 0003f150:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | |||
| 0003f160:·6e74·5f76·616c·7565·5f76·6172·5f73·7973··nt_value_var_sys | |||
| 0003f170:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003f180:·7922·3e44·4546·4155·4c54·3c2f·6162·6272··y">DEFAULT</abbr | |||
| 0003f190:·3e27·0a0a·0a73·7464·6572·725f·6f66·5f63··>'...stderr_of_c | |||
| 0003f1a0:·616c·6c3d·2428·7570·6461·7465·2d63·7279··all=$(update-cry | |||
| 0003f1b0:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 0003f1c0:·6574·2024·7b76·6172·5f73·7973·7465·6d5f··et·${var_system_ | |||
| 0003f1d0:·6372·7970·746f·5f70·6f6c·6963·797d·2032··crypto_policy}·2 | |||
| 0003f1e0:·2667·743b·2661·6d70·3b31·2026·6774·3b20··>&1·>· | |||
| 0003f1f0:·2f64·6576·2f6e·756c·6c29·0a72·633d·243f··/dev/null).rc=$? | |||
| 0003f200:·0a0a·6966·2074·6573·7420·2224·7263·2220··..if·test·"$rc"· | |||
| 0003f210:·3d20·3132·373b·2074·6865·6e0a·0965·6368··=·127;·then..ech | |||
| 0003f220:·6f20·2224·7374·6465·7272·5f6f·665f·6361··o·"$stderr_of_ca | |||
| 0003f230:·6c6c·2220·2667·743b·2661·6d70·3b32·0a09··ll"·>&2.. | |||
| 0003f240:·6563·686f·2022·4d61·6b65·2073·7572·6520··echo·"Make·sure· | |||
| 0003f250:·7468·6174·2074·6865·2073·6372·6970·7420··that·the·script· | |||
| 0003f260:·6973·2069·6e73·7461·6c6c·6564·206f·6e20··is·installed·on· | |||
| 0003f270:·7468·6520·7265·6d65·6469·6174·6564·2073··the·remediated·s | |||
| 0003f280:·7973·7465·6d2e·2220·2667·743b·2661·6d70··ystem."·>& | |||
| 0003f290:·3b32·0a09·6563·686f·2022·5365·6520·6f75··;2..echo·"See·ou | |||
| 0003f2a0:·7470·7574·206f·6620·7468·6520·2764·6e66··tput·of·the·'dnf | |||
| 0003f2b0:·2070·726f·7669·6465·7320·7570·6461·7465···provides·update | |||
| 0003f2c0:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | |||
| 0003f2d0:·2720·636f·6d6d·616e·6422·2026·6774·3b26··'·command"·>& | |||
| 0003f2e0:·616d·703b·320a·0965·6368·6f20·2274·6f20··amp;2..echo·"to· | |||
| 0003f2f0:·7365·6520·7768·6174·2070·6163·6b61·6765··see·what·package | |||
| 0003f300:·2074·6f20·2872·6529·696e·7374·616c·6c22···to·(re)install" | |||
| 0003f310:·2026·6774·3b26·616d·703b·320a·0a09·6661···>&2...fa | |||
| 0003f320:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003f330:·616e·2065·7272·6f72·2063·6f64·650a·656c··an·error·code.el | |||
| 0003f340:·6966·2074·6573·7420·2224·7263·2220·213d··if·test·"$rc"·!= | |||
| 0003f350:·2030·3b20·7468·656e·0a09·6563·686f·2022···0;·then..echo·" | |||
| 0003f360:·4572·726f·7220·696e·766f·6b69·6e67·2074··Error·invoking·t | |||
| 0003f370:·6865·2075·7064·6174·652d·6372·7970·746f··he·update-crypto | |||
| 0003f380:·2d70·6f6c·6963·6965·7320·7363·7269·7074··-policies·script | |||
| 0003f390:·3a20·2473·7464·6572·725f·6f66·5f63·616c··:·$stderr_of_cal | |||
| 0003f3a0:·6c22·2026·6774·3b26·616d·703b·320a·0966··l"·>&2..f | |||
| 0003f3b0:·616c·7365·2020·2320·656e·6420·7769·7468··alse··#·end·with | |||
| 0003f3c0:·2061·6e20·6572·726f·7220·636f·6465·0a66···an·error·code.f | |||
| 0003f3d0:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003f3e0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003f3f0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003f400:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003f410:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003f420:·6574·3d22·2369·646d·3134·3635·2220·7461··et="#idm1465"·ta | |||
| 0003f430:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003f440:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003f450:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003f460:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003f470:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003f480:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003f490:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003f4a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003f4b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003f4c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003f4d0:·6964·3d22·6964·6d31·3436·3522·3e3c·7461··id="idm1465"><ta | |||
| 0003f4e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003f4f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003f500:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003f510:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003f520:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003f | 0003f530:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003f540:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003f550:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003f560:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003f570:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003f580:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003f | 0003f590:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003f5a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003f5b0:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003f5c0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003f5d0:·3e3c·636f·6465·3e2d·206e·616d·653a·2058··><code>-·name:·X | |||
| 0003f5e0:·4343·4446·2056·616c·7565·2076·6172·5f73··CCDF·Value·var_s | |||
| 0003f1a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003f1b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003f1c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003f1d0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003f1e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003f1f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003f200:·3a20·5843·4344·4620·5661·6c75·6520·7661··:·XCCDF·Value·va | |||
| 0003f210:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| Max diff block lines reached; 76422/100074 bytes (76.37%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·3 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·3 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 266, 14 lines modified | Offset 266, 34 lines modified | ||
| 266 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 266 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 267 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 267 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 268 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, | 268 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, |
| 269 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 | 269 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 270 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- | 270 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- |
| 271 | ·····················GPOS-00174 | 271 | ·····················GPOS-00174 |
| 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 274 | var_system_crypto_policy='DEFAULT' | ||
| 275 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 276 | null) | ||
| 277 | rc=$? | ||
| 278 | if·test·"$rc"·=·127;·then | ||
| 279 | » echo·"$stderr_of_call"·>&2 | ||
| 280 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 281 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 282 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 283 | » false··#·end·with·an·error·code | ||
| 284 | elif·test·"$rc"·!=·0;·then | ||
| 285 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 286 | » false··#·end·with·an·error·code | ||
| 287 | fi | ||
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 288 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 274 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 289 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 275 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 290 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 276 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 291 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 277 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 292 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 278 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 293 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 279 | ··set_fact: | 294 | ··set_fact: |
| Offset 316, 34 lines modified | Offset 336, 14 lines modified | ||
| 316 | ··-·PCI-DSSv4-2.2.7 | 336 | ··-·PCI-DSSv4-2.2.7 |
| 317 | ··-·configure_crypto_policy | 337 | ··-·configure_crypto_policy |
| 318 | ··-·high_severity | 338 | ··-·high_severity |
| 319 | ··-·low_complexity | 339 | ··-·low_complexity |
| 320 | ··-·low_disruption | 340 | ··-·low_disruption |
| 321 | ··-·no_reboot_needed | 341 | ··-·no_reboot_needed |
| 322 | ··-·restrict_strategy | 342 | ··-·restrict_strategy |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | var_system_crypto_policy='DEFAULT' | ||
| 325 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 326 | null) | ||
| 327 | rc=$? | ||
| 328 | if·test·"$rc"·=·127;·then | ||
| 329 | » echo·"$stderr_of_call"·>&2 | ||
| 330 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 331 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 332 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 333 | » false··#·end·with·an·error·code | ||
| 334 | elif·test·"$rc"·!=·0;·then | ||
| 335 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 336 | » false··#·end·with·an·error·code | ||
| 337 | fi | ||
| 338 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 343 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 339 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 344 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 340 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up | 345 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up |
| 341 | to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured | 346 | to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured |
| 342 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies | 347 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies |
| 343 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is | 348 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is |
| 344 | configured·to·use·the·system-wide·crypto·policy·settings. | 349 | configured·to·use·the·system-wide·crypto·policy·settings. |
| Offset 351, 14 lines modified | Offset 351, 22 lines modified | ||
| 351 | ············expectations,·and·makes·system·configuration·more·fragmented. | 351 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| 352 | Severity: ··high | 352 | Severity: ··high |
| 353 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy | 353 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy |
| 354 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 | 354 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 |
| 355 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 355 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 356 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 356 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 357 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 | 357 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 |
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 363 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 364 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 363 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy | 370 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy |
| 364 | ··file: | 371 | ··file: |
| Offset 371, 22 lines modified | Offset 379, 14 lines modified | ||
| 371 | ··-·NIST-800-53-SC-13 | 379 | ··-·NIST-800-53-SC-13 |
| 372 | ··-·configure_kerberos_crypto_policy | 380 | ··-·configure_kerberos_crypto_policy |
| 373 | ··-·configure_strategy | 381 | ··-·configure_strategy |
| 374 | ··-·high_severity | 382 | ··-·high_severity |
| 375 | ··-·low_complexity | 383 | ··-·low_complexity |
| 376 | ··-·low_disruption | 384 | ··-·low_disruption |
| 377 | ··-·reboot_required | 385 | ··-·reboot_required |
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 383 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 384 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 385 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 386 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 386 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 387 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 387 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan | 388 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan |
| Max diff block lines reached; 8465/14664 bytes (57.73%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d10:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d20:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d20:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d30:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d30:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d40:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d40:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d50:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d50:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d60:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d60:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d70:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d80:·6f66·2032·3032·3 | 00037d80:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d90:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037da0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037da0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037db0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037db0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037dc0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037dc0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037dd0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037dd0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037de0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037de0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037df0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037df0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16520, 173 lines modified | Offset 16520, 173 lines modified | ||
| 00040870:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00040870:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00040880:·3532·3322·2074·6162·696e·6465·783d·2230··523"·tabindex="0 | 00040880:·3532·3322·2074·6162·696e·6465·783d·2230··523"·tabindex="0 | ||
| 00040890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00040890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 000408a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 000408a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 000408b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 000408b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 000408c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 000408c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 000408d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 000408d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 000408e0:·6961·7469·6f6e·20 | 000408e0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 000408f0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00040900:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00040910:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00040920:·7365·2220·6964·3d22·6964·6d31·3532·3322··se"·id="idm1523" | |||
| 000408f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00040900:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00040910:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00040920:·6c61·7073·6522·2069·643d·2269·646d·3135··lapse"·id="idm15 | |||
| 00040930:·3233·223e·3c74·6162·6c65·2063·6c61·7373··23"><table·class | |||
| 00040940:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00040950:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00040960:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00040970:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00040980:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00040990:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000409a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 000409b0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 000409c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000409d0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 000409e0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 000409f0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00040a00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 00040a10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 00040 | 00040930:·3e3c·7072·653e·3c63·6f64·653e·0a76·6172··><pre><code>.var | ||
| 00040 | 00040940:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | ||
| 00040950:·6f6c·6963·793d·273c·6162·6272·2074·6974··olicy='<abbr·tit | |||
| 00040960:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 00040970:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 00040980:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 00040990:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 00040 | 000409a0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | ||
| 00040 | 000409b0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | ||
| 000409c0:·554c·543c·2f61·6262·723e·270a·0a0a·7374··ULT</abbr>'...st | |||
| 000409d0:·6465·7272·5f6f·665f·6361·6c6c·3d24·2875··derr_of_call=$(u | |||
| 000409e0:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 000409f0:·6963·6965·7320·2d2d·7365·7420·247b·7661··icies·--set·${va | |||
| 00040a60:·6d6f·7465·2074·6f20·7661·7269·6162·6c65··mote·to·variable | |||
| 00040a70:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | |||
| 00040a80:·2076·6172·5f73·7973·7465·6d5f·6372·7970···var_system_cryp | |||
| 00040a90:·746f·5f70·6f6c·6963·793a·2021·2173·7472··to_policy:·!!str | |||
| 00040aa0:·203c·6162·6272·2074·6974·6c65·3d22·6672···<abbr·title="fr | |||
| 00040ab0:·6f6d·2050·726f·6669·6c65·2f72·6566·696e··om·Profile/refin | |||
| 00040ac0:·652d·7661·6c75·653a·2078·6363·6466·5f6f··e-value:·xccdf_o | |||
| 00040ad0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | |||
| 00040ae0:·6e74·656e·745f·7661·6c75·655f·7661·725f··ntent_value_var_ | |||
| 00040a | 00040a00:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | ||
| 00040b00:·6c69·6379·223e·4445·4641·554c·543c·2f61··licy">DEFAULT</a | |||
| 00040b10:·6262·723e·0a20·2074·6167·733a·0a20·2020··bbr>.··tags:.··· | |||
| 00040b20:·202d·2061·6c77·6179·730a·0a2d·206e·616d···-·always..-·nam | |||
| 00040b30:·653a·2043·6f6e·6669·6775·7265·2053·7973··e:·Configure·Sys | |||
| 00040b40:·7465·6d20·4372·7970·746f·6772·6170·6879··tem·Cryptography | |||
| 00040b50:·2050·6f6c·6963·790a·2020·6c69·6e65·696e···Policy.··linein | |||
| 00040 | 00040a10:·706f·6c69·6379·7d20·3226·6774·3b26·616d··policy}·2>&am | ||
| 00040a20:·703b·3120·2667·743b·202f·6465·762f·6e75··p;1·>·/dev/nu | |||
| 00040a30:·6c6c·290a·7263·3d24·3f0a·0a69·6620·7465··ll).rc=$?..if·te | |||
| 00040a40:·7374·2022·2472·6322·203d·2031·3237·3b20··st·"$rc"·=·127;· | |||
| 00040a50:·7468·656e·0a09·6563·686f·2022·2473·7464··then..echo·"$std | |||
| 00040a60:·6572·725f·6f66·5f63·616c·6c22·2026·6774··err_of_call"·> | |||
| 00040a70:·3b26·616d·703b·320a·0965·6368·6f20·224d··;&2..echo·"M | |||
| 00040a80:·616b·6520·7375·7265·2074·6861·7420·7468··ake·sure·that·th | |||
| 00040a90:·6520·7363·7269·7074·2069·7320·696e·7374··e·script·is·inst | |||
| 00040aa0:·616c·6c65·6420·6f6e·2074·6865·2072·656d··alled·on·the·rem | |||
| 00040ab0:·6564·6961·7465·6420·7379·7374·656d·2e22··ediated·system." | |||
| 00040ac0:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 00040ad0:·6f20·2253·6565·206f·7574·7075·7420·6f66··o·"See·output·of | |||
| 00040ae0:·2074·6865·2027·646e·6620·7072·6f76·6964···the·'dnf·provid | |||
| 00040af0:·6573·2075·7064·6174·652d·6372·7970·746f··es·update-crypto | |||
| 00040b00:·2d70·6f6c·6963·6965·7327·2063·6f6d·6d61··-policies'·comma | |||
| 00040b10:·6e64·2220·2667·743b·2661·6d70·3b32·0a09··nd"·>&2.. | |||
| 00040b20:·6563·686f·2022·746f·2073·6565·2077·6861··echo·"to·see·wha | |||
| 00040b30:·7420·7061·636b·6167·6520·746f·2028·7265··t·package·to·(re | |||
| 00040b40:·2969·6e73·7461·6c6c·2220·2667·743b·2661··)install"·>&a | |||
| 00040b50:·6d70·3b32·0a0a·0966·616c·7365·2020·2320··mp;2...false··#· | |||
| 00040b60:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 00040b70:·7220·636f·6465·0a65·6c69·6620·7465·7374··r·code.elif·test | |||
| 00040b80:·2022·2472·6322·2021·3d20·303b·2074·6865···"$rc"·!=·0;·the | |||
| 00040b90:·6e0a·0965·6368·6f20·2245·7272·6f72·2069··n..echo·"Error·i | |||
| 00040ba0:·6e76·6f6b·696e·6720·7468·6520·7570·6461··nvoking·the·upda | |||
| 00040b | 00040bb0:·7465·2d63·7279·7074·6f2d·706f·6c69·6369··te-crypto-polici | ||
| 00040b80:·6369·6573·2f63·6f6e·6669·670a·2020·2020··cies/config.···· | |||
| 00040b90:·7265·6765·7870·3a20·5e28·3f21·2329·285c··regexp:·^(?!#)(\ | |||
| 00040b | 00040bc0:·6573·2073·6372·6970·743a·2024·7374·6465··es·script:·$stde | ||
| 00040bd0:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 00040be0:·2661·6d70·3b32·0a09·6661·6c73·6520·2023··&2..false··# | |||
| 00040bf0:·2065·6e64·2077·6974·6820·616e·2065·7272···end·with·an·err | |||
| 00040c00:·6f72·2063·6f64·650a·6669·0a3c·2f63·6f64··or·code.fi.</cod | |||
| 00040c10:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00040c20:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00040c30:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00040c40:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00040c50:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00040c60:·6d31·3532·3522·2074·6162·696e·6465·783d··m1525"·tabindex= | |||
| 00040c70:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00040c80:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00040c90:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00040ca0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00040cb0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00040cc0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 00040cd0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00040ce0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00040cf0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00040d00:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00040d10:·3135·3235·223e·3c74·6162·6c65·2063·6c61··1525"><table·cla | |||
| Max diff block lines reached; 2103592/2127244 bytes (98.89%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·23 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·23 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:anolis:anolis_os:23 | 43 | ····*·cpe:/o:anolis:anolis_os:23 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 397, 14 lines modified | Offset 397, 33 lines modified | ||
| 397 | ············_\x8i_\x8s_\x8m······1446 | 397 | ············_\x8i_\x8s_\x8m······1446 |
| 398 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 398 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 399 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 399 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 400 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 400 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 401 | ·····················FCS_TLSC_EXT.1 | 401 | ·····················FCS_TLSC_EXT.1 |
| 402 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 402 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 403 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 403 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 405 | var_system_crypto_policy='DEFAULT' | ||
| 406 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 407 | rc=$? | ||
| 408 | if·test·"$rc"·=·127;·then | ||
| 409 | » echo·"$stderr_of_call"·>&2 | ||
| 410 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 411 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 412 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 413 | » false··#·end·with·an·error·code | ||
| 414 | elif·test·"$rc"·!=·0;·then | ||
| 415 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 416 | » false··#·end·with·an·error·code | ||
| 417 | fi | ||
| 404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 405 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 419 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 406 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 420 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 407 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 421 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 408 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 422 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 409 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 423 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 410 | ··set_fact: | 424 | ··set_fact: |
| Offset 447, 33 lines modified | Offset 466, 14 lines modified | ||
| 447 | ··-·PCI-DSSv4-2.2.7 | 466 | ··-·PCI-DSSv4-2.2.7 |
| 448 | ··-·configure_crypto_policy | 467 | ··-·configure_crypto_policy |
| 449 | ··-·high_severity | 468 | ··-·high_severity |
| 450 | ··-·low_complexity | 469 | ··-·low_complexity |
| 451 | ··-·low_disruption | 470 | ··-·low_disruption |
| 452 | ··-·no_reboot_needed | 471 | ··-·no_reboot_needed |
| 453 | ··-·restrict_strategy | 472 | ··-·restrict_strategy |
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 455 | var_system_crypto_policy='DEFAULT' | ||
| 456 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 457 | rc=$? | ||
| 458 | if·test·"$rc"·=·127;·then | ||
| 459 | » echo·"$stderr_of_call"·>&2 | ||
| 460 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 461 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 462 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 463 | » false··#·end·with·an·error·code | ||
| 464 | elif·test·"$rc"·!=·0;·then | ||
| 465 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 466 | » false··#·end·with·an·error·code | ||
| 467 | fi | ||
| 468 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 473 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 469 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 474 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 470 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 475 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| 471 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either | 476 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either |
| 472 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 477 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 473 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 478 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 474 | ············expectations,·and·makes·system·configuration·more·fragmented. | 479 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 484, 14 lines modified | Offset 484, 19 lines modified | ||
| 484 | ·····················(ii) | 484 | ·····················(ii) |
| 485 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 485 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 486 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 486 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 487 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 487 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 488 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 488 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 489 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 489 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 490 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 490 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 491 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 492 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 493 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 491 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 494 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 492 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 495 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 493 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 496 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 494 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 497 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 495 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 498 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 496 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 499 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 497 | ··lineinfile: | 500 | ··lineinfile: |
| Offset 508, 19 lines modified | Offset 513, 14 lines modified | ||
| 508 | ··-·PCI-DSSv4-2.2.7 | 513 | ··-·PCI-DSSv4-2.2.7 |
| 509 | ··-·configure_ssh_crypto_policy | 514 | ··-·configure_ssh_crypto_policy |
| 510 | ··-·disable_strategy | 515 | ··-·disable_strategy |
| 511 | ··-·low_complexity | 516 | ··-·low_complexity |
| 512 | ··-·medium_disruption | 517 | ··-·medium_disruption |
| 513 | ··-·medium_severity | 518 | ··-·medium_severity |
| 514 | ··-·reboot_required | 519 | ··-·reboot_required |
| 515 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 516 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 517 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 518 | Group ·Sudo· Group·contains·3·rules | 520 | Group ·Sudo· Group·contains·3·rules |
| 519 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 521 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 520 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 522 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 521 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to | 523 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to |
| 522 | execute. | 524 | execute. |
| 523 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. | 525 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. |
| Offset 531, 14 lines modified | Offset 531, 45 lines modified | ||
| 531 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from | 531 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from |
| 532 | ············retaining·access·to·the·user's·terminal·after·the·main·program·has·finished·executing. | 532 | ············retaining·access·to·the·user's·terminal·after·the·main·program·has·finished·executing. |
| 533 | Severity: ··medium | 533 | Severity: ··medium |
| Max diff block lines reached; 248469/254807 bytes (97.51%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16111, 173 lines modified | Offset 16111, 173 lines modified | ||
| 0003eee0:·7461·7267·6574·3d22·2369·646d·3135·3233··target="#idm1523 | 0003eee0:·7461·7267·6574·3d22·2369·646d·3135·3233··target="#idm1523 | ||
| 0003eef0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003eef0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ef00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ef00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ef10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ef10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ef20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ef20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ef30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ef30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ef40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ef40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ef50:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003ef60:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ef70:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ef80:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ef90:·2069·643d·2269·646d·3135·3233·223e·3c70···id="idm1523"><p | |||
| 0003efa0:·7265·3e3c·636f·6465·3e0a·7661·725f·7379··re><code>.var_sy | |||
| 0003efb0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0003efc0:·6379·3d27·3c61·6262·7220·7469·746c·653d··cy='<abbr·title= | |||
| 0003efd0:·2266·726f·6d20·5072·6f66·696c·652f·7265··"from·Profile/re | |||
| 0003efe0:·6669·6e65·2d76·616c·7565·3a20·7863·6364··fine-value:·xccd | |||
| 0003eff0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | |||
| 0003f000:·2e63·6f6e·7465·6e74·5f76·616c·7565·5f76··.content_value_v | |||
| 0003ef50:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003ef60:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ef70:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ef80:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ef90:·7365·2220·6964·3d22·6964·6d31·3532·3322··se"·id="idm1523" | |||
| 0003efa0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003efb0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003efc0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003efd0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003efe0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003eff0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003f000:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003f010:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003f020:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003f030:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003f040:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003f050:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003f060:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003f070:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 0003f080:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003f090:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003f0a0:·653a·2058·4343·4446·2056·616c·7565·2076··e:·XCCDF·Value·v | |||
| 0003f0 | 0003f010:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | ||
| 0003f020:·5f70·6f6c·6963·7922·3e44·4546·4155·4c54··_policy">DEFAULT | |||
| 0003f030:·3c2f·6162·6272·3e27·0a0a·0a73·7464·6572··</abbr>'...stder | |||
| 0003f040:·725f·6f66·5f63·616c·6c3d·2428·7570·6461··r_of_call=$(upda | |||
| 0003f050:·7465·2d63·7279·7074·6f2d·706f·6c69·6369··te-crypto-polici | |||
| 0003f0c0:·5f70·6f6c·6963·7920·2320·7072·6f6d·6f74··_policy·#·promot | |||
| 0003f0d0:·6520·746f·2076·6172·6961·626c·650a·2020··e·to·variable.·· | |||
| 0003f0e0:·7365·745f·6661·6374·3a0a·2020·2020·7661··set_fact:.····va | |||
| 0003f0f0:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 0003f100:·706f·6c69·6379·3a20·2121·7374·7220·3c61··policy:·!!str·<a | |||
| 0003f110:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | |||
| 0003f120:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | |||
| 0003f130:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | |||
| 0003f140:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | |||
| 0003f150:·6e74·5f76·616c·7565·5f76·6172·5f73·7973··nt_value_var_sys | |||
| 0003f160:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003f170:·7922·3e44·4546·4155·4c54·3c2f·6162·6272··y">DEFAULT</abbr | |||
| 0003f180:·3e0a·2020·7461·6773·3a0a·2020·2020·2d20··>.··tags:.····-· | |||
| 0003f190:·616c·7761·7973·0a0a·2d20·6e61·6d65·3a20··always..-·name:· | |||
| 0003f1a0:·436f·6e66·6967·7572·6520·5379·7374·656d··Configure·System | |||
| 0003f1b0:·2043·7279·7074·6f67·7261·7068·7920·506f···Cryptography·Po | |||
| 0003f1c0:·6c69·6379·0a20·206c·696e·6569·6e66·696c··licy.··lineinfil | |||
| 0003f1d0:·653a·0a20·2020·2070·6174·683a·202f·6574··e:.····path:·/et | |||
| 0003f1e0:·632f·6372·7970·746f·2d70·6f6c·6963·6965··c/crypto-policie | |||
| 0003f1f0:·732f·636f·6e66·6967·0a20·2020·2072·6567··s/config.····reg | |||
| 0003f200:·6578·703a·205e·283f·2123·2928·5c53·2b29··exp:·^(?!#)(\S+) | |||
| 0003f210:·240a·2020·2020·6c69·6e65·3a20·277b·7b20··$.····line:·'{{· | |||
| 0003f220:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003f230:·6f5f·706f·6c69·6379·207d·7d27·0a20·2020··o_policy·}}'.··· | |||
| 0003f240:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | |||
| 0003f250:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 0003f260:·3030·2d35·332d·4143·2d31·3728·3229·0a20··00-53-AC-17(2).· | |||
| 0003f270:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | |||
| 0003f280:·432d·3137·2861·290a·2020·2d20·4e49·5354··C-17(a).··-·NIST | |||
| 0003f290:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003f2a0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003f2b0:·4d41·2d34·2836·290a·2020·2d20·4e49·5354··MA-4(6).··-·NIST | |||
| 0003f2c0:·2d38·3030·2d35·332d·5343·2d31·3228·3229··-800-53-SC-12(2) | |||
| 0003f2d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003f2e0:·2d53·432d·3132·2833·290a·2020·2d20·4e49··-SC-12(3).··-·NI | |||
| 0003f2f0:·5354·2d38·3030·2d35·332d·5343·2d31·330a··ST-800-53-SC-13. | |||
| 0003f300:·2020·2d20·5043·492d·4453·5376·342d·322e····-·PCI-DSSv4-2. | |||
| 0003f310:·322e·370a·2020·2d20·636f·6e66·6967·7572··2.7.··-·configur | |||
| 0003f320:·655f·6372·7970·746f·5f70·6f6c·6963·790a··e_crypto_policy. | |||
| 0003f330:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | |||
| 0003f340:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003f350:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003f360:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | |||
| 0003f370:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003f380:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003f390:·6779·0a0a·2d20·6e61·6d65·3a20·5665·7269··gy..-·name:·Veri | |||
| 0003f3a0:·6679·2074·6861·7420·4372·7970·746f·2050··fy·that·Crypto·P | |||
| 0003f3b0:·6f6c·6963·7920·6973·2053·6574·2028·7275··olicy·is·Set·(ru | |||
| 0003f3c0:·6e74·696d·6529·0a20·2063·6f6d·6d61·6e64··ntime).··command | |||
| 0003f3d0:·3a20·2f75·7372·2f62·696e·2f75·7064·6174··:·/usr/bin/updat | |||
| 0003f3e0:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 0003f | 0003f060:·6573·202d·2d73·6574·2024·7b76·6172·5f73··es·--set·${var_s | ||
| 0003f | 0003f070:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | ||
| 0003f410:·6963·7920·7d7d·0a20·2074·6167·733a·0a20··icy·}}.··tags:.· | |||
| 0003f420:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | |||
| 0003f | 0003f080:·6963·797d·2032·2667·743b·2661·6d70·3b31··icy}·2>&1 | ||
| 0003f090:·2026·6774·3b20·2f64·6576·2f6e·756c·6c29···>·/dev/null) | |||
| 0003f0a0:·0a72·633d·243f·0a0a·6966·2074·6573·7420··.rc=$?..if·test· | |||
| 0003f0b0:·2224·7263·2220·3d20·3132·373b·2074·6865··"$rc"·=·127;·the | |||
| 0003f0c0:·6e0a·0965·6368·6f20·2224·7374·6465·7272··n..echo·"$stderr | |||
| 0003f0d0:·5f6f·665f·6361·6c6c·2220·2667·743b·2661··_of_call"·>&a | |||
| 0003f0e0:·6d70·3b32·0a09·6563·686f·2022·4d61·6b65··mp;2..echo·"Make | |||
| 0003f0f0:·2073·7572·6520·7468·6174·2074·6865·2073···sure·that·the·s | |||
| 0003f100:·6372·6970·7420·6973·2069·6e73·7461·6c6c··cript·is·install | |||
| 0003f110:·6564·206f·6e20·7468·6520·7265·6d65·6469··ed·on·the·remedi | |||
| Max diff block lines reached; 2187381/2211033 bytes (98.93%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·23 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·23 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:anolis:anolis_os:23 | 41 | ····*·cpe:/o:anolis:anolis_os:23 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 353, 14 lines modified | Offset 353, 33 lines modified | ||
| 353 | ············_\x8i_\x8s_\x8m······1446 | 353 | ············_\x8i_\x8s_\x8m······1446 |
| 354 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 354 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 355 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 355 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 357 | ·····················FCS_TLSC_EXT.1 | 357 | ·····················FCS_TLSC_EXT.1 |
| 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 361 | var_system_crypto_policy='DEFAULT' | ||
| 362 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 363 | rc=$? | ||
| 364 | if·test·"$rc"·=·127;·then | ||
| 365 | » echo·"$stderr_of_call"·>&2 | ||
| 366 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 367 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 368 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 369 | » false··#·end·with·an·error·code | ||
| 370 | elif·test·"$rc"·!=·0;·then | ||
| 371 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 372 | » false··#·end·with·an·error·code | ||
| 373 | fi | ||
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 363 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 364 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 365 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 379 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 366 | ··set_fact: | 380 | ··set_fact: |
| Offset 403, 33 lines modified | Offset 422, 14 lines modified | ||
| 403 | ··-·PCI-DSSv4-2.2.7 | 422 | ··-·PCI-DSSv4-2.2.7 |
| 404 | ··-·configure_crypto_policy | 423 | ··-·configure_crypto_policy |
| 405 | ··-·high_severity | 424 | ··-·high_severity |
| 406 | ··-·low_complexity | 425 | ··-·low_complexity |
| 407 | ··-·low_disruption | 426 | ··-·low_disruption |
| 408 | ··-·no_reboot_needed | 427 | ··-·no_reboot_needed |
| 409 | ··-·restrict_strategy | 428 | ··-·restrict_strategy |
| 410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 411 | var_system_crypto_policy='DEFAULT' | ||
| 412 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 413 | rc=$? | ||
| 414 | if·test·"$rc"·=·127;·then | ||
| 415 | » echo·"$stderr_of_call"·>&2 | ||
| 416 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 417 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 418 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 419 | » false··#·end·with·an·error·code | ||
| 420 | elif·test·"$rc"·!=·0;·then | ||
| 421 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 422 | » false··#·end·with·an·error·code | ||
| 423 | fi | ||
| 424 | Group ·Updating·Software· Group·contains·1·rule | 429 | Group ·Updating·Software· Group·contains·1·rule |
| 425 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 430 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 426 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 431 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| 427 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 432 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 428 | Anolis·OS·23·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records | 433 | Anolis·OS·23·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records |
| 429 | metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all | 434 | metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all |
| Offset 634, 14 lines modified | Offset 634, 20 lines modified | ||
| 634 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 634 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 635 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 635 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 636 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 636 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 637 | ···········standards,·and·guidance. | 637 | ···········standards,·and·guidance. |
| 638 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 638 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 639 | Severity: ·medium | 639 | Severity: ·medium |
| 640 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue | 640 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue |
| 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 642 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 643 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 644 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 645 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 646 | chgrp·-L·0·/etc/issue | ||
| 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 642 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 643 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 644 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 645 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 646 | -·name:·Test·for·existence·/etc/issue | 652 | -·name:·Test·for·existence·/etc/issue |
| 647 | ··stat: | 653 | ··stat: |
| Offset 663, 30 lines modified | Offset 669, 30 lines modified | ||
| 663 | ··tags: | 669 | ··tags: |
| 664 | ··-·configure_strategy | 670 | ··-·configure_strategy |
| 665 | ··-·file_groupowner_etc_issue | 671 | ··-·file_groupowner_etc_issue |
| 666 | ··-·low_complexity | 672 | ··-·low_complexity |
| 667 | ··-·low_disruption | 673 | ··-·low_disruption |
| 668 | ··-·medium_severity | 674 | ··-·medium_severity |
| 669 | ··-·no_reboot_needed | 675 | ··-·no_reboot_needed |
| 670 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 671 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 672 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 673 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 674 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 675 | chgrp·-L·0·/etc/issue | ||
| 676 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 676 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 677 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: | 677 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: |
| 678 | $·sudo·chgrp·root·/etc/motd | 678 | $·sudo·chgrp·root·/etc/motd |
| 679 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 679 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 680 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 680 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 681 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 681 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 682 | ···········standards,·and·guidance. | 682 | ···········standards,·and·guidance. |
| 683 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 683 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 684 | Severity: ·medium | 684 | Severity: ·medium |
| Max diff block lines reached; 263185/269629 bytes (97.61%) of diff not shown. | |||
| Offset 14289, 16 lines modified | Offset 14289, 16 lines modified | ||
| 00037d00:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037d00:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037d10:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037d10:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037d20:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037d20:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037d30:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037d30:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d40:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d40:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d50:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d50:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d70:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d70:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d80:·2d31·3 | 00037d80:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037d90:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d90:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037da0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037da0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037db0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037db0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037dc0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037dc0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037dd0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037dd0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037de0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037de0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037df0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037df0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 16519, 174 lines modified | Offset 16519, 174 lines modified | ||
| 00040860:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 00040860:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00040870:·6964·6d31·3532·3322·2074·6162·696e·6465··idm1523"·tabinde | 00040870:·6964·6d31·3532·3322·2074·6162·696e·6465··idm1523"·tabinde | ||
| 00040880:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00040880:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00040890:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00040890:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 000408a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 000408a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 000408b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 000408b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 000408c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 000408c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 000408d0:·656d·6564·6961·7469·6f6e·20 | 000408d0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 000408e0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 000408f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040900:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00040910:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 00040920:·3532·3322·3e3c·7072·653e·3c63·6f64·653e··523"><pre><code> | |||
| 00040930:·0a76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 00040940:·746f·5f70·6f6c·6963·793d·273c·6162·6272··to_policy='<abbr | |||
| 00040950:·2074·6974·6c65·3d22·6672·6f6d·2050·726f···title="from·Pro | |||
| 00040960:·6669·6c65·2f72·6566·696e·652d·7661·6c75··file/refine-valu | |||
| 00040970:·653a·2078·6363·6466·5f6f·7267·2e73·7367··e:·xccdf_org.ssg | |||
| 00040980:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | |||
| 000408e0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 000408f0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00040900:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00040910:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00040920:·646d·3135·3233·223e·3c74·6162·6c65·2063··dm1523"><table·c | |||
| 00040930:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00040940:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00040950:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00040960:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00040970:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00040980:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00040990:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 000409a0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 000409b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000409c0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 000409d0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 000409e0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 000409f0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 00040a00:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 00040a10:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00040a20:·653e·2d20·6e61·6d65·3a20·5843·4344·4620··e>-·name:·XCCDF· | |||
| 00040 | 00040990:·7661·6c75·655f·7661·725f·7379·7374·656d··value_var_system | ||
| 00040 | 000409a0:·5f63·7279·7074·6f5f·706f·6c69·6379·223e··_crypto_policy"> | ||
| 000409b0:·4445·4641·554c·543c·2f61·6262·723e·270a··DEFAULT</abbr>'. | |||
| 000409c0:·0a0a·7374·6465·7272·5f6f·665f·6361·6c6c··..stderr_of_call | |||
| 000409d0:·3d24·2875·7064·6174·652d·6372·7970·746f··=$(update-crypto | |||
| 000409e0:·2d70·6f6c·6963·6965·7320·2d2d·7365·7420··-policies·--set· | |||
| 00040a50:·2070·726f·6d6f·7465·2074·6f20·7661·7269···promote·to·vari | |||
| 00040a60:·6162·6c65·0a20·2073·6574·5f66·6163·743a··able.··set_fact: | |||
| 00040a70:·0a20·2020·2076·6172·5f73·7973·7465·6d5f··.····var_system_ | |||
| 00040a80:·6372·7970·746f·5f70·6f6c·6963·793a·2021··crypto_policy:·! | |||
| 00040a90:·2173·7472·203c·6162·6272·2074·6974·6c65··!str·<abbr·title | |||
| 00040aa0:·3d22·6672·6f6d·2050·726f·6669·6c65·2f72··="from·Profile/r | |||
| 00040ab0:·6566·696e·652d·7661·6c75·653a·2078·6363··efine-value:·xcc | |||
| 00040ac0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | |||
| 00040ad0:·742e·636f·6e74·656e·745f·7661·6c75·655f··t.content_value_ | |||
| 00040ae0:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 00040af0:·6f5f·706f·6c69·6379·223e·4445·4641·554c··o_policy">DEFAUL | |||
| 00040b00:·543c·2f61·6262·723e·0a20·2074·6167·733a··T</abbr>.··tags: | |||
| 00040b10:·0a20·2020·202d·2061·6c77·6179·730a·0a2d··.····-·always..- | |||
| 00040b20:·206e·616d·653a·2043·6f6e·6669·6775·7265···name:·Configure | |||
| 00040b30:·2053·7973·7465·6d20·4372·7970·746f·6772···System·Cryptogr | |||
| 00040b40:·6170·6879·2050·6f6c·6963·790a·2020·6c69··aphy·Policy.··li | |||
| 00040b50:·6e65·696e·6669·6c65·3a0a·2020·2020·7061··neinfile:.····pa | |||
| 00040b60:·7468·3a20·2f65·7463·2f63·7279·7074·6f2d··th:·/etc/crypto- | |||
| 00040b70:·706f·6c69·6369·6573·2f63·6f6e·6669·670a··policies/config. | |||
| 00040b80:·2020·2020·7265·6765·7870·3a20·5e28·3f21······regexp:·^(?! | |||
| 00040b90:·2329·285c·532b·2924·0a20·2020·206c·696e··#)(\S+)$.····lin | |||
| 00040ba0:·653a·2027·7b7b·2076·6172·5f73·7973·7465··e:·'{{·var_syste | |||
| 00040bb0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7920··m_crypto_policy· | |||
| 00040bc0:·7d7d·270a·2020·2020·6372·6561·7465·3a20··}}'.····create:· | |||
| 00040bd0:·7472·7565·0a20·2074·6167·733a·0a20·202d··true.··tags:.··- | |||
| 00040be0:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | |||
| 00040bf0:·3137·2832·290a·2020·2d20·4e49·5354·2d38··17(2).··-·NIST-8 | |||
| 00040c00:·3030·2d35·332d·4143·2d31·3728·6129·0a20··00-53-AC-17(a).· | |||
| 00040c10:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 00040c20:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 00040c30:·3830·302d·3533·2d4d·412d·3428·3629·0a20··800-53-MA-4(6).· | |||
| 00040c40:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 00040c50:·432d·3132·2832·290a·2020·2d20·4e49·5354··C-12(2).··-·NIST | |||
| 00040c60:·2d38·3030·2d35·332d·5343·2d31·3228·3329··-800-53-SC-12(3) | |||
| 00040c70:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00040c80:·2d53·432d·3133·0a20·202d·2050·4349·2d44··-SC-13.··-·PCI-D | |||
| 00040c90:·5353·7634·2d32·2e32·2e37·0a20·202d·2063··SSv4-2.2.7.··-·c | |||
| 00040ca0:·6f6e·6669·6775·7265·5f63·7279·7074·6f5f··onfigure_crypto_ | |||
| 00040cb0:·706f·6c69·6379·0a20·202d·2068·6967·685f··policy.··-·high_ | |||
| 00040cc0:·7365·7665·7269·7479·0a20·202d·206c·6f77··severity.··-·low | |||
| 00040cd0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 00040ce0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 00040cf0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 00040d00:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | |||
| 00040d10:·5f73·7472·6174·6567·790a·0a2d·206e·616d··_strategy..-·nam | |||
| 00040d20:·653a·2056·6572·6966·7920·7468·6174·2043··e:·Verify·that·C | |||
| 00040d30:·7279·7074·6f20·506f·6c69·6379·2069·7320··rypto·Policy·is· | |||
| 00040d40:·5365·7420·2872·756e·7469·6d65·290a·2020··Set·(runtime).·· | |||
| 00040d50:·636f·6d6d·616e·643a·202f·7573·722f·6269··command:·/usr/bi | |||
| 00040d60:·6e2f·7570·6461·7465·2d63·7279·7074·6f2d··n/update-crypto- | |||
| 00040d70:·706f·6c69·6369·6573·202d·2d73·6574·207b··policies·--set·{ | |||
| 00040 | 000409f0:·247b·7661·725f·7379·7374·656d·5f63·7279··${var_system_cry | ||
| 00040d90:·7074·6f5f·706f·6c69·6379·207d·7d0a·2020··pto_policy·}}.·· | |||
| 00040da0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00040 | 00040a00:·7074·6f5f·706f·6c69·6379·7d20·3226·6774··pto_policy}·2> | ||
| 00040a10:·3b26·616d·703b·3120·2667·743b·202f·6465··;&1·>·/de | |||
| 00040a20:·762f·6e75·6c6c·290a·7263·3d24·3f0a·0a69··v/null).rc=$?..i | |||
| 00040a30:·6620·7465·7374·2022·2472·6322·203d·2031··f·test·"$rc"·=·1 | |||
| 00040a40:·3237·3b20·7468·656e·0a09·6563·686f·2022··27;·then..echo·" | |||
| 00040a50:·2473·7464·6572·725f·6f66·5f63·616c·6c22··$stderr_of_call" | |||
| 00040a60:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 00040a70:·6f20·224d·616b·6520·7375·7265·2074·6861··o·"Make·sure·tha | |||
| 00040a80:·7420·7468·6520·7363·7269·7074·2069·7320··t·the·script·is· | |||
| 00040a90:·696e·7374·616c·6c65·6420·6f6e·2074·6865··installed·on·the | |||
| Max diff block lines reached; 2103799/2127727 bytes (98.88%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·8 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·8 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:anolis:anolis_os:8 | 43 | ····*·cpe:/o:anolis:anolis_os:8 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 397, 14 lines modified | Offset 397, 33 lines modified | ||
| 397 | ············_\x8i_\x8s_\x8m······1446 | 397 | ············_\x8i_\x8s_\x8m······1446 |
| 398 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 398 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 399 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 399 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 400 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 400 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 401 | ·····················FCS_TLSC_EXT.1 | 401 | ·····················FCS_TLSC_EXT.1 |
| 402 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 402 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 403 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 403 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 405 | var_system_crypto_policy='DEFAULT' | ||
| 406 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 407 | rc=$? | ||
| 408 | if·test·"$rc"·=·127;·then | ||
| 409 | » echo·"$stderr_of_call"·>&2 | ||
| 410 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 411 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 412 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 413 | » false··#·end·with·an·error·code | ||
| 414 | elif·test·"$rc"·!=·0;·then | ||
| 415 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 416 | » false··#·end·with·an·error·code | ||
| 417 | fi | ||
| 404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 405 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 419 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 406 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 420 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 407 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 421 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 408 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 422 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 409 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 423 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 410 | ··set_fact: | 424 | ··set_fact: |
| Offset 447, 33 lines modified | Offset 466, 14 lines modified | ||
| 447 | ··-·PCI-DSSv4-2.2.7 | 466 | ··-·PCI-DSSv4-2.2.7 |
| 448 | ··-·configure_crypto_policy | 467 | ··-·configure_crypto_policy |
| 449 | ··-·high_severity | 468 | ··-·high_severity |
| 450 | ··-·low_complexity | 469 | ··-·low_complexity |
| 451 | ··-·low_disruption | 470 | ··-·low_disruption |
| 452 | ··-·no_reboot_needed | 471 | ··-·no_reboot_needed |
| 453 | ··-·restrict_strategy | 472 | ··-·restrict_strategy |
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 455 | var_system_crypto_policy='DEFAULT' | ||
| 456 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 457 | rc=$? | ||
| 458 | if·test·"$rc"·=·127;·then | ||
| 459 | » echo·"$stderr_of_call"·>&2 | ||
| 460 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 461 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 462 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 463 | » false··#·end·with·an·error·code | ||
| 464 | elif·test·"$rc"·!=·0;·then | ||
| 465 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 466 | » false··#·end·with·an·error·code | ||
| 467 | fi | ||
| 468 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 473 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 469 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 474 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 470 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 475 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| 471 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either | 476 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either |
| 472 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 477 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 473 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 478 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 474 | ············expectations,·and·makes·system·configuration·more·fragmented. | 479 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 484, 14 lines modified | Offset 484, 19 lines modified | ||
| 484 | ·····················(ii) | 484 | ·····················(ii) |
| 485 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 485 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 486 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 486 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 487 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 487 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 488 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 488 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 489 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 489 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 490 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 490 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 491 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 492 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 493 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 491 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 494 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 492 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 495 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 493 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 496 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 494 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 497 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 495 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 498 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 496 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 499 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 497 | ··lineinfile: | 500 | ··lineinfile: |
| Offset 508, 19 lines modified | Offset 513, 14 lines modified | ||
| 508 | ··-·PCI-DSSv4-2.2.7 | 513 | ··-·PCI-DSSv4-2.2.7 |
| 509 | ··-·configure_ssh_crypto_policy | 514 | ··-·configure_ssh_crypto_policy |
| 510 | ··-·disable_strategy | 515 | ··-·disable_strategy |
| 511 | ··-·low_complexity | 516 | ··-·low_complexity |
| 512 | ··-·medium_disruption | 517 | ··-·medium_disruption |
| 513 | ··-·medium_severity | 518 | ··-·medium_severity |
| 514 | ··-·reboot_required | 519 | ··-·reboot_required |
| 515 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 516 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 517 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 518 | Group ·Sudo· Group·contains·3·rules | 520 | Group ·Sudo· Group·contains·3·rules |
| 519 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 521 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 520 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 522 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 521 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to | 523 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed·to |
| 522 | execute. | 524 | execute. |
| 523 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. | 525 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. |
| Offset 531, 14 lines modified | Offset 531, 45 lines modified | ||
| 531 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from | 531 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from |
| 532 | ············retaining·access·to·the·user's·terminal·after·the·main·program·has·finished·executing. | 532 | ············retaining·access·to·the·user's·terminal·after·the·main·program·has·finished·executing. |
| 533 | Severity: ··medium | 533 | Severity: ··medium |
| Max diff block lines reached; 248466/254802 bytes (97.51%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037c80:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037c90:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037c90:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037ca0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037ca0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037cb0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037cb0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037cc0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037cc0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037cd0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037cd0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ce0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ce0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037cf0:·323 | 00037cf0:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00037d00:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d00:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d10:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d10:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d20:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d20:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d30:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d30:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037d40:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037d40:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037d50:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037d50:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037d60:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037d60:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 16110, 173 lines modified | Offset 16110, 173 lines modified | ||
| 0003eed0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 0003eed0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 0003eee0:·3532·3322·2074·6162·696e·6465·783d·2230··523"·tabindex="0 | 0003eee0:·3532·3322·2074·6162·696e·6465·783d·2230··523"·tabindex="0 | ||
| 0003eef0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003eef0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003ef00:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003ef00:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003ef10:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003ef10:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003ef20:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003ef20:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003ef30:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003ef30:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003ef40:·6961·7469·6f6e·20 | 0003ef40:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003ef50:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003ef60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ef70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ef80:·7365·2220·6964·3d22·6964·6d31·3532·3322··se"·id="idm1523" | |||
| 0003ef50:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ef60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ef70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ef80:·6c61·7073·6522·2069·643d·2269·646d·3135··lapse"·id="idm15 | |||
| 0003ef90:·3233·223e·3c74·6162·6c65·2063·6c61·7373··23"><table·class | |||
| 0003efa0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003efb0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003efc0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003efd0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003efe0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003eff0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003f000:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003f010:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003f020:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003f030:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003f040:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003f050:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003f060:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 0003f070:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 0003 | 0003ef90:·3e3c·7072·653e·3c63·6f64·653e·0a76·6172··><pre><code>.var | ||
| 0003 | 0003efa0:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | ||
| 0003efb0:·6f6c·6963·793d·273c·6162·6272·2074·6974··olicy='<abbr·tit | |||
| 0003efc0:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003efd0:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003efe0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003eff0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003f0 | 0003f000:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | ||
| 0003f010:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003f020:·554c·543c·2f61·6262·723e·270a·0a0a·7374··ULT</abbr>'...st | |||
| 0003f030:·6465·7272·5f6f·665f·6361·6c6c·3d24·2875··derr_of_call=$(u | |||
| 0003f040:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 0003f050:·6963·6965·7320·2d2d·7365·7420·247b·7661··icies·--set·${va | |||
| 0003f060:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 0003f070:·706f·6c69·6379·7d20·3226·6774·3b26·616d··policy}·2>&am | |||
| 0003f080:·703b·3120·2667·743b·202f·6465·762f·6e75··p;1·>·/dev/nu | |||
| 0003f090:·6c6c·290a·7263·3d24·3f0a·0a69·6620·7465··ll).rc=$?..if·te | |||
| 0003f0a0:·7374·2022·2472·6322·203d·2031·3237·3b20··st·"$rc"·=·127;· | |||
| 0003f0b0:·7468·656e·0a09·6563·686f·2022·2473·7464··then..echo·"$std | |||
| 0003f0c0:·6572·725f·6f66·5f63·616c·6c22·2026·6774··err_of_call"·> | |||
| 0003f0d0:·3b26·616d·703b·320a·0965·6368·6f20·224d··;&2..echo·"M | |||
| 0003f0e0:·616b·6520·7375·7265·2074·6861·7420·7468··ake·sure·that·th | |||
| 0003f0f0:·6520·7363·7269·7074·2069·7320·696e·7374··e·script·is·inst | |||
| 0003f100:·616c·6c65·6420·6f6e·2074·6865·2072·656d··alled·on·the·rem | |||
| 0003f110:·6564·6961·7465·6420·7379·7374·656d·2e22··ediated·system." | |||
| 0003f120:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 0003f130:·6f20·2253·6565·206f·7574·7075·7420·6f66··o·"See·output·of | |||
| 0003f140:·2074·6865·2027·646e·6620·7072·6f76·6964···the·'dnf·provid | |||
| 0003f150:·6573·2075·7064·6174·652d·6372·7970·746f··es·update-crypto | |||
| 0003f160:·2d70·6f6c·6963·6965·7327·2063·6f6d·6d61··-policies'·comma | |||
| 0003f170:·6e64·2220·2667·743b·2661·6d70·3b32·0a09··nd"·>&2.. | |||
| 0003f180:·6563·686f·2022·746f·2073·6565·2077·6861··echo·"to·see·wha | |||
| 0003f190:·7420·7061·636b·6167·6520·746f·2028·7265··t·package·to·(re | |||
| 0003f1a0:·2969·6e73·7461·6c6c·2220·2667·743b·2661··)install"·>&a | |||
| 0003f1b0:·6d70·3b32·0a0a·0966·616c·7365·2020·2320··mp;2...false··#· | |||
| 0003f1c0:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 0003f1d0:·7220·636f·6465·0a65·6c69·6620·7465·7374··r·code.elif·test | |||
| 0003f1e0:·2022·2472·6322·2021·3d20·303b·2074·6865···"$rc"·!=·0;·the | |||
| 0003f1f0:·6e0a·0965·6368·6f20·2245·7272·6f72·2069··n..echo·"Error·i | |||
| 0003f200:·6e76·6f6b·696e·6720·7468·6520·7570·6461··nvoking·the·upda | |||
| 0003f210:·7465·2d63·7279·7074·6f2d·706f·6c69·6369··te-crypto-polici | |||
| 0003f220:·6573·2073·6372·6970·743a·2024·7374·6465··es·script:·$stde | |||
| 0003f230:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003f240:·2661·6d70·3b32·0a09·6661·6c73·6520·2023··&2..false··# | |||
| 0003f250:·2065·6e64·2077·6974·6820·616e·2065·7272···end·with·an·err | |||
| 0003f260:·6f72·2063·6f64·650a·6669·0a3c·2f63·6f64··or·code.fi.</cod | |||
| 0003f270:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003f280:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003f290:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003f2a0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003f2b0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003f2c0:·6d31·3532·3522·2074·6162·696e·6465·783d··m1525"·tabindex= | |||
| 0003f2d0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003f2e0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003f2f0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003f300:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003f310:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003f320:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003f330:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003f340:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003f350:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003f360:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003f370:·3135·3235·223e·3c74·6162·6c65·2063·6c61··1525"><table·cla | |||
| 0003f380:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003f390:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003f3a0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003f3b0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003f3c0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003f3d0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003f3e0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003f3f0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003f400:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003f410:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003f420:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003f430:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003f440:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | |||
| 0003f450:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | |||
| 0003f460:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003f470:·2d20·6e61·6d65·3a20·5843·4344·4620·5661··-·name:·XCCDF·Va | |||
| 0003f480:·6c75·6520·7661·725f·7379·7374·656d·5f63··lue·var_system_c | |||
| Max diff block lines reached; 2188416/2212068 bytes (98.93%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·8 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·8 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:anolis:anolis_os:8 | 41 | ····*·cpe:/o:anolis:anolis_os:8 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 353, 14 lines modified | Offset 353, 33 lines modified | ||
| 353 | ············_\x8i_\x8s_\x8m······1446 | 353 | ············_\x8i_\x8s_\x8m······1446 |
| 354 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 354 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 355 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 355 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 357 | ·····················FCS_TLSC_EXT.1 | 357 | ·····················FCS_TLSC_EXT.1 |
| 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 361 | var_system_crypto_policy='DEFAULT' | ||
| 362 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 363 | rc=$? | ||
| 364 | if·test·"$rc"·=·127;·then | ||
| 365 | » echo·"$stderr_of_call"·>&2 | ||
| 366 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 367 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 368 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 369 | » false··#·end·with·an·error·code | ||
| 370 | elif·test·"$rc"·!=·0;·then | ||
| 371 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 372 | » false··#·end·with·an·error·code | ||
| 373 | fi | ||
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 363 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 364 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 365 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 379 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 366 | ··set_fact: | 380 | ··set_fact: |
| Offset 403, 33 lines modified | Offset 422, 14 lines modified | ||
| 403 | ··-·PCI-DSSv4-2.2.7 | 422 | ··-·PCI-DSSv4-2.2.7 |
| 404 | ··-·configure_crypto_policy | 423 | ··-·configure_crypto_policy |
| 405 | ··-·high_severity | 424 | ··-·high_severity |
| 406 | ··-·low_complexity | 425 | ··-·low_complexity |
| 407 | ··-·low_disruption | 426 | ··-·low_disruption |
| 408 | ··-·no_reboot_needed | 427 | ··-·no_reboot_needed |
| 409 | ··-·restrict_strategy | 428 | ··-·restrict_strategy |
| 410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 411 | var_system_crypto_policy='DEFAULT' | ||
| 412 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 413 | rc=$? | ||
| 414 | if·test·"$rc"·=·127;·then | ||
| 415 | » echo·"$stderr_of_call"·>&2 | ||
| 416 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 417 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 418 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 419 | » false··#·end·with·an·error·code | ||
| 420 | elif·test·"$rc"·!=·0;·then | ||
| 421 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 422 | » false··#·end·with·an·error·code | ||
| 423 | fi | ||
| 424 | Group ·Updating·Software· Group·contains·1·rule | 429 | Group ·Updating·Software· Group·contains·1·rule |
| 425 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 430 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 426 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 431 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| 427 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 432 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 428 | Anolis·OS·8·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records | 433 | Anolis·OS·8·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records |
| 429 | metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all | 434 | metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all |
| Offset 634, 14 lines modified | Offset 634, 20 lines modified | ||
| 634 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 634 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 635 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 635 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 636 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 636 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 637 | ···········standards,·and·guidance. | 637 | ···········standards,·and·guidance. |
| 638 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 638 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 639 | Severity: ·medium | 639 | Severity: ·medium |
| 640 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue | 640 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue |
| 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 642 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 643 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 644 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 645 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 646 | chgrp·-L·0·/etc/issue | ||
| 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 642 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 643 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 644 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 645 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 646 | -·name:·Test·for·existence·/etc/issue | 652 | -·name:·Test·for·existence·/etc/issue |
| 647 | ··stat: | 653 | ··stat: |
| Offset 663, 30 lines modified | Offset 669, 30 lines modified | ||
| 663 | ··tags: | 669 | ··tags: |
| 664 | ··-·configure_strategy | 670 | ··-·configure_strategy |
| 665 | ··-·file_groupowner_etc_issue | 671 | ··-·file_groupowner_etc_issue |
| 666 | ··-·low_complexity | 672 | ··-·low_complexity |
| 667 | ··-·low_disruption | 673 | ··-·low_disruption |
| 668 | ··-·medium_severity | 674 | ··-·medium_severity |
| 669 | ··-·no_reboot_needed | 675 | ··-·no_reboot_needed |
| 670 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 671 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 672 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 673 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 674 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 675 | chgrp·-L·0·/etc/issue | ||
| 676 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 676 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 677 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: | 677 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: |
| 678 | $·sudo·chgrp·root·/etc/motd | 678 | $·sudo·chgrp·root·/etc/motd |
| 679 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 679 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 680 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 680 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 681 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 681 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 682 | ···········standards,·and·guidance. | 682 | ···········standards,·and·guidance. |
| 683 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 683 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 684 | Severity: ·medium | 684 | Severity: ·medium |
| Max diff block lines reached; 263184/269625 bytes (97.61%) of diff not shown. | |||
| Offset 14565, 15 lines modified | Offset 14565, 15 lines modified | ||
| 00038e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038eb0:·3230·323 | 00038eb0:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00038ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15321, 235 lines modified | Offset 15321, 235 lines modified | ||
| 0003bd80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003bd80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003bd90:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | 0003bd90:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | ||
| 0003bda0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003bda0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003bdb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003bdb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003bdc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003bdc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003bdd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003bdd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003bde0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003bde0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003bdf0:·656d·6564·6961·7469·6f6e·20 | 0003bdf0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003be00:· | 0003be00:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003be10:· | 0003be10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003be20:· | 0003be20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003be30:·6 | 0003be30:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003be40:·6 | 0003be40:·6d38·3030·3222·3e3c·7461·626c·6520·636c··m8002"><table·cl | ||
| 0003be50:·6 | 0003be50:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003be60:· | 0003be60:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003be70:· | 0003be70:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003be80:·6 | 0003be80:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003be90:· | 0003be90:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003bea0:· | 0003bea0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003beb0:· | 0003beb0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003bec0:·7 | 0003bec0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003bed0:· | 0003bed0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003bee0:· | 0003bee0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003bef0:· | 0003bef0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003bf00:· | 0003bf00:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003bf10:· | 0003bf10:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003bf20:·6 | 0003bf20:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003bf30:· | 0003bf30:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | ||
| 0003bf40:·3e0a·7061·636b·6167·6520·2d2d·6164·643d··>.package·--add= | |||
| 0003bf50:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 0003bf60:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bf70:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bf80:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bf90:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bfa0:·6172·6765·743d·2223·6964·6d38·3030·3322··arget="#idm8003" | |||
| 0003bfb0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bfc0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bfd0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bfe0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bff0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003c000:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003c010:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003c020:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c030:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c040:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c050:·2220·6964·3d22·6964·6d38·3030·3322·3e3c··"·id="idm8003">< | |||
| 0003c060:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c070:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c080:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c090:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c0a0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c0b0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c0c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003 | 0003bf40:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | ||
| 0003bf50:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003bf60:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003bf70:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003bf80:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003bf90:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003bfa0:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003bfb0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bfc0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bfd0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bfe0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bff0:·6574·3d22·2369·646d·3830·3033·2220·7461··et="#idm8003"·ta | |||
| 0003c000:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c010:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c020:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c030:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c040:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c050:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c060:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003c070:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c080:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c090:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c0a0:·2269·646d·3830·3033·223e·3c74·6162·6c65··"idm8003"><table | |||
| 0003c0b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c0c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c0d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c0e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c0f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c | 0003c100:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003c0f0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c1 | 0003c110:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003c120:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003c1 | 0003c130:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003c120:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c130:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c140:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c150:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003c160:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003c170:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003c180:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003c190:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003c1a0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003c1 | 0003c140:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003c150:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c160:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c170:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003c180:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003c190:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003c1a0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003c1b0:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003c1c0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003c1d0:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003c1e0:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003c1f0:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003c200:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003c210:·7265·6e76·205d·3b20·7468·656e·0a0a·6966··renv·];·then..if | |||
| 0003c220:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003c230:·7420·2261·6964·6522·203b·2074·6865·6e0a··t·"aide"·;·then. | |||
| Max diff block lines reached; 22087369/22119577 bytes (99.85%) of diff not shown. | |||
| Offset 14564, 15 lines modified | Offset 14564, 15 lines modified | ||
| 00038e30:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e30:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e40:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e40:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e50:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e50:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e60:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e60:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e70:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e70:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038e80:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038e80:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038e90:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038e90:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038ea0:·3230·323 | 00038ea0:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00038eb0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038eb0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ec0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ec0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ed0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ed0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038ee0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038ee0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038ef0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038ef0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f00:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f00:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f10:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f10:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15326, 236 lines modified | Offset 15326, 236 lines modified | ||
| 0003bdd0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003bdd0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003bde0:·3d22·2369·646d·3830·3032·2220·7461·6269··="#idm8002"·tabi | 0003bde0:·3d22·2369·646d·3830·3032·2220·7461·6269··="#idm8002"·tabi | ||
| 0003bdf0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003bdf0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003be00:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003be00:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003be10:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003be10:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003be20:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003be20:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003be30:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003be30:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003be40:·223e·5265·6d65·6469·6174·696f·6e20· | 0003be40:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003be50:· | 0003be50:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | ||
| 0003be60:· | 0003be60:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003be70:· | 0003be70:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003be80:· | 0003be80:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003be90:· | 0003be90:·2269·646d·3830·3032·223e·3c74·6162·6c65··"idm8002"><table | ||
| 0003bea0:· | 0003bea0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003beb0:· | 0003beb0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003bec0:·6 | 0003bec0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003bed0:· | 0003bed0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003bee0:· | 0003bee0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003bef0:· | 0003bef0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003bf00:· | 0003bf00:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003bf10:· | 0003bf10:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003bf20:· | 0003bf20:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003bf30:· | 0003bf30:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003bf40:· | 0003bf40:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003bf50:· | 0003bf50:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003bf60:· | 0003bf60:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003bf70:· | 0003bf70:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003bf80:· | 0003bf80:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003bf90:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 0003bfa0:·6464·3d61·6964·650a·3c2f·636f·6465·3e3c··dd=aide.</code>< | |||
| 0003bfb0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bfc0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bfd0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bfe0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bff0:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003c000:·3033·2220·7461·6269·6e64·6578·3d22·3022··03"·tabindex="0" | |||
| 0003c010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003c020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003c030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003c040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003c050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c060:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003c070:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c080:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c090:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c0a0:·7073·6522·2069·643d·2269·646d·3830·3033··pse"·id="idm8003 | |||
| 0003c0b0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c0c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c0d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c0e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c0f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c100:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003c110:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003 | 0003bf90:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | ||
| 0003bfa0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003bfb0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003bfc0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003bfd0:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003bfe0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003bff0:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003c000:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003c010:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003c020:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003c030:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003c040:·6172·6765·743d·2223·6964·6d38·3030·3322··arget="#idm8003" | |||
| 0003c050:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003c060:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003c070:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003c080:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003c090:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003c0a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003c0b0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003c0c0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c0d0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c0e0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c0f0:·6964·3d22·6964·6d38·3030·3322·3e3c·7461··id="idm8003"><ta | |||
| 0003c100:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c110:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c120:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c130:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c140:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c1 | 0003c150:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003c1 | 0003c160:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c150:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003c160:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c170:· | 0003c170:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003c180:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c190:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c1 | 0003c1a0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003c190:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c1a0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003c1b0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003c1c0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003c1d0:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003c1e0:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003c1f0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003c | 0003c1b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c1c0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c1d0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c1e0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c1f0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003c200:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003c210:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003c220:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 0003c230:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003c240:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003c250:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003c260:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0003c270:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003c280:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003c290:·656e·0a20·2020·2079·756d·2069·6e73·7461··en.····yum·insta | |||
| Max diff block lines reached; 22359835/22392181 bytes (99.86%) of diff not shown. | |||
| Offset 14566, 15 lines modified | Offset 14566, 15 lines modified | ||
| 00038e50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038ea0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038ea0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038eb0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038eb0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038ec0:·3230·323 | 00038ec0:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00038ed0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038ed0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ee0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ee0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ef0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ef0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038f00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038f00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038f10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038f10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15317, 235 lines modified | Offset 15317, 235 lines modified | ||
| 0003bd40:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003bd40:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003bd50:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | 0003bd50:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | ||
| 0003bd60:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003bd60:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003bd70:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003bd70:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003bd80:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003bd80:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003bd90:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003bd90:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003bda0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003bda0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003bdb0:·6469·6174·696f·6e20· | 0003bdb0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003bdc0:· | 0003bdc0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003bdd0:· | 0003bdd0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003bde0:· | 0003bde0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003bdf0:·6 | 0003bdf0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | ||
| 0003be00:·3 | 0003be00:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | ||
| 0003be10:· | 0003be10:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003be20:·7 | 0003be20:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003be30:· | 0003be30:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003be40:·6 | 0003be40:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003be50:· | 0003be50:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003be60:· | 0003be60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003be70:· | 0003be70:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003be80:·6 | 0003be80:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003be90:· | 0003be90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003bea0:· | 0003bea0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003beb0:·6 | 0003beb0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003bec0:· | 0003bec0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003bed0:· | 0003bed0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003bee0:· | 0003bee0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003bef0:· | 0003bef0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | ||
| 0003bf00:·6163·6b61·6765·202d·2d61·6464·3d61·6964··ackage·--add=aid | |||
| 0003bf10:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003bf20:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bf30:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bf40:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bf50:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bf60:·6574·3d22·2369·646d·3830·3033·2220·7461··et="#idm8003"·ta | |||
| 0003bf70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bf80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bf90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bfa0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bfb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bfc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bfd0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003bfe0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bf | 0003bf00:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | ||
| 0003bf10:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003bf20:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003bf30:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003bf40:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003bf50:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003bf60:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bf70:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bf80:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bf90:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bfa0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bfb0:·2223·6964·6d38·3030·3322·2074·6162·696e··"#idm8003"·tabin | |||
| 0003bfc0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bfd0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bfe0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bff0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c000:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c010:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003c020:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003c030:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c0 | 0003c040:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003c010:·643d·2269·646d·3830·3033·223e·3c74·6162··d="idm8003"><tab | |||
| 0003c020:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c030:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c040:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c050:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c0 | 0003c050:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003c060:·6d38·3030·3322·3e3c·7461·626c·6520·636c··m8003"><table·cl | |||
| 0003c070:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003c080:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003c090:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003c0a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003c0b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003c0c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c0d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003c0 | 0003c0e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003c0 | 0003c0f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003c | 0003c100:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003c110:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003c120:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003c130:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003c140:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003c150:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003c160:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003c170:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003c180:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003c190:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003c1a0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003c1b0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003c1c0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003c1d0:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 0003c1e0:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003c1f0:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 0003c200:·2079·756d·2069·6e73·7461·6c6c·202d·7920···yum·install·-y· | |||
| 0003c210:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 0003c220:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003c230:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003c240:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003c250:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003c260:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003c270:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c280:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c290:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c2a0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c2b0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c2c0:·3030·3422·2074·6162·696e·6465·783d·2230··004"·tabindex="0 | |||
| 0003c2d0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c2e0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| Max diff block lines reached; 9143532/9175740 bytes (99.65%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 87 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 87 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 88 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 88 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 147, 33 lines modified | Offset 147, 41 lines modified | ||
| 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 151 | ············_\x8c_\x8i_\x8s············5.3.1 | 151 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·--add=aide | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | include·install_aide | 159 | include·install_aide |
| 166 | class·install_aide·{ | 160 | class·install_aide·{ |
| 167 | ··package·{·'aide': | 161 | ··package·{·'aide': |
| 168 | ····ensure·=>·'installed', | 162 | ····ensure·=>·'installed', |
| 169 | ··} | 163 | ··} |
| 170 | } | 164 | } |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 172 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 173 | ····yum·install·-y·"aide" | ||
| 174 | fi | ||
| 175 | else | ||
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 177 | fi | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | -·name:·Ensure·aide·is·installed | 183 | -·name:·Ensure·aide·is·installed |
| 177 | ··package: | 184 | ··package: |
| Offset 193, 36 lines modified | Offset 201, 28 lines modified | ||
| 193 | ··-·no_reboot_needed | 201 | ··-·no_reboot_needed |
| 194 | ··-·package_aide_installed | 202 | ··-·package_aide_installed |
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 196 | [[packages]] | 204 | [[packages]] |
| 197 | name·=·"aide" | 205 | name·=·"aide" |
| 198 | version·=·"*" | 206 | version·=·"*" |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 204 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 205 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 206 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 207 | ····yum·install·-y·"aide" | ||
| 208 | fi | ||
| 212 | package·install·aide | ||
| 209 | else | ||
| 210 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 211 | fi | ||
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 217 | package· | 218 | package·--add=aide |
| 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 219 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 219 | Run·the·following·command·to·generate·a·new·database: | 220 | Run·the·following·command·to·generate·a·new·database: |
| 220 | $·sudo·/usr/sbin/aide·--init | 221 | $·sudo·/usr/sbin/aide·--init |
| 221 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 222 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 222 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 223 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 223 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 224 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 224 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 225 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 247, 14 lines modified | Offset 247, 28 lines modified | ||
| 247 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 247 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 248 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 248 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 249 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 249 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 250 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 250 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 251 | ············_\x8c_\x8i_\x8s············5.3.1 | 251 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 252 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 252 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 253 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 253 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 255 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 256 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 257 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 258 | ····yum·install·-y·"aide" | ||
| 259 | fi | ||
| 260 | /usr/sbin/aide·--init | ||
| 261 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 262 | else | ||
| 263 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 264 | fi | ||
| 254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 255 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 266 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 256 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 267 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1054852/1060579 bytes (99.46%) of diff not shown. | |||
| Offset 14564, 16 lines modified | Offset 14564, 16 lines modified | ||
| 00038e30:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038e30:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038e40:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038e40:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038e50:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038e50:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038e60:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038e60:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038e70:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038e70:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038e80:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038e80:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038e90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038e90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038ea0:·2020·2020·2028·6173·206f·6620·3230·323 | 00038ea0:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00038eb0:·2d31·3 | 00038eb0:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00038ec0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038ec0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038ed0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038ed0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038ee0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038ee0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038ef0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038ef0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038f00:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038f00:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038f10:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038f10:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038f20:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038f20:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 14984, 216 lines modified | Offset 14984, 216 lines modified | ||
| 0003a870:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | 0003a870:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | ||
| 0003a880:·3231·3822·2074·6162·696e·6465·783d·2230··218"·tabindex="0 | 0003a880:·3231·3822·2074·6162·696e·6465·783d·2230··218"·tabindex="0 | ||
| 0003a890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003a890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003a8a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003a8a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003a8b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003a8b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003a8c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003a8c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003a8d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003a8d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003a8e0:·6961·7469·6f6e·20 | 0003a8e0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | ||
| 0003a8f0:· | 0003a8f0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003a900:· | 0003a900:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003a910:·6 | 0003a910:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003a920:·6 | 0003a920:·6170·7365·2220·6964·3d22·6964·6d31·3332··apse"·id="idm132 | ||
| 0003a930:·3 | 0003a930:·3138·223e·3c74·6162·6c65·2063·6c61·7373··18"><table·class | ||
| 0003a940:· | 0003a940:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003a950:·7 | 0003a950:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003a960:· | 0003a960:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003a970:·6 | 0003a970:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003a980:· | 0003a980:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003a990:· | 0003a990:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003a9a0:· | 0003a9a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003a9b0:·6 | 0003a9b0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003a9c0:· | 0003a9c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003a9d0:· | 0003a9d0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003a9e0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003a9f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003aa00:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003aa10:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003aa20:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 0003aa30:·6163·6b61·6765·202d·2d61·6464·3d64·6e66··ackage·--add=dnf | |||
| 0003aa40:·2d61·7574·6f6d·6174·6963·0a3c·2f63·6f64··-automatic.</cod | |||
| 0003aa50:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003aa60:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003aa70:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003aa80:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003aa90:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003aaa0:·6d31·3332·3139·2220·7461·6269·6e64·6578··m13219"·tabindex | |||
| 0003aab0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003aac0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003aad0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003aae0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003aaf0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003ab00:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003ab10:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ab20:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ab30:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ab40:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ab50:·3133·3231·3922·3e3c·7461·626c·6520·636c··13219"><table·cl | |||
| 0003ab60:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ab70:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ab80:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ab90:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003aba0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003abb0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003abc0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003abd0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003abe0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003abf0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ac00:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ac10:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003ac20:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003ac30:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003ac40:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003ac50:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f64··nclude·install_d | |||
| 0003ac60:·6e66·2d61·7574·6f6d·6174·6963·0a0a·636c··nf-automatic..cl | |||
| 0003ac70:·6173·7320·696e·7374·616c·6c5f·646e·662d··ass·install_dnf- | |||
| 0003ac80:·6175·746f·6d61·7469·6320·7b0a·2020·7061··automatic·{.··pa | |||
| 0003ac90:·636b·6167·6520·7b20·2764·6e66·2d61·7574··ckage·{·'dnf-aut | |||
| 0003aca0:·6f6d·6174·6963·273a·0a20·2020·2065·6e73··omatic':.····ens | |||
| 0003acb0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003acc0:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003acd0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ace0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003acf0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ad00:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ad10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ad20:·6964·6d31·3332·3230·2220·7461·6269·6e64··idm13220"·tabind | |||
| 0003ad30:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003ad40:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003ad50:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003ad60:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003ad70:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003ad80:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003ad90:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003ada0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003adb0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003adc0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003add0:·6964·6d31·3332·3230·223e·3c74·6162·6c65··idm13220"><table | |||
| 0003ade0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003adf0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ae00:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ae10:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ae20:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ae30:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ae40:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ae50:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ae60:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ae70:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ae80:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ae90:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003aea0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003a | 0003a9e0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003a9f0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003aa00:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003aa10:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003aa20:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003aa30:·7564·6520·696e·7374·616c·6c5f·646e·662d··ude·install_dnf- | |||
| 0003aa40:·6175·746f·6d61·7469·630a·0a63·6c61·7373··automatic..class | |||
| 0003aec0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003aed0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003aee0:·2064·6e66·2d61·7574·6f6d·6174·6963·2069···dnf-automatic·i | |||
| Max diff block lines reached; 3110623/3140347 bytes (99.05%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 86 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 87 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 87 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 88 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 88 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 111, 33 lines modified | Offset 111, 35 lines modified | ||
| 111 | $·sudo·yum·install·dnf-automatic | 111 | $·sudo·yum·install·dnf-automatic |
| 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 113 | ············suitable·for·automatic,·regular·execution. | 113 | ············suitable·for·automatic,·regular·execution. |
| 114 | Severity: ··medium | 114 | Severity: ··medium |
| 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 116 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 116 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package·--add=dnf-automatic | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | include·install_dnf-automatic | 123 | include·install_dnf-automatic |
| 130 | class·install_dnf-automatic·{ | 124 | class·install_dnf-automatic·{ |
| 131 | ··package·{·'dnf-automatic': | 125 | ··package·{·'dnf-automatic': |
| 132 | ····ensure·=>·'installed', | 126 | ····ensure·=>·'installed', |
| 133 | ··} | 127 | ··} |
| 134 | } | 128 | } |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 135 | ····yum·install·-y·"dnf-automatic" | ||
| 136 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | -·name:·Ensure·dnf-automatic·is·installed | 142 | -·name:·Ensure·dnf-automatic·is·installed |
| 141 | ··package: | 143 | ··package: |
| Offset 151, 30 lines modified | Offset 153, 28 lines modified | ||
| 151 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 152 | ··-·package_dnf-automatic_installed | 154 | ··-·package_dnf-automatic_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | [[packages]] | 156 | [[packages]] |
| 155 | name·=·"dnf-automatic" | 157 | name·=·"dnf-automatic" |
| 156 | version·=·"*" | 158 | version·=·"*" |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | package·install·dnf-automatic | ||
| 162 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 163 | ····yum·install·-y·"dnf-automatic" | ||
| 164 | fi | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | package· | 170 | package·--add=dnf-automatic |
| 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 172 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 172 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 173 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 173 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 174 | automatic.conf. | 174 | automatic.conf. |
| 175 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 175 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 176 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 176 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 177 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 177 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 184, 36 lines modified | Offset 184, 14 lines modified | ||
| 184 | Severity: ··medium | 184 | Severity: ··medium |
| 185 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 185 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 186 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 186 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 187 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 187 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 188 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 188 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 189 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 189 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 190 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 190 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 196 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 197 | ··ini_file: | ||
| 198 | ····dest:·/etc/dnf/automatic.conf | ||
| 199 | ····section:·commands | ||
| 200 | ····option:·apply_updates | ||
| 201 | ····value:·'yes' | ||
| 202 | ····create:·true | ||
| 203 | ··tags: | ||
| 204 | ··-·NIST-800-53-CM-6(a) | ||
| 205 | ··-·NIST-800-53-SI-2(5) | ||
| 206 | ··-·NIST-800-53-SI-2(c) | ||
| 207 | ··-·dnf-automatic_apply_updates | ||
| 208 | ··-·low_complexity | ||
| 209 | ··-·medium_disruption | ||
| 210 | ··-·medium_severity | ||
| 211 | ··-·no_reboot_needed | ||
| 212 | ··-·unknown_strategy | ||
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 214 | found=false | 192 | found=false |
| 215 | #·set·value·in·all·files·if·they·contain·section·or·key | 193 | #·set·value·in·all·files·if·they·contain·section·or·key |
| 216 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | 194 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do |
| 217 | ····if·[·!·-e·"$f"·];·then | 195 | ····if·[·!·-e·"$f"·];·then |
| Max diff block lines reached; 219863/225477 bytes (97.51%) of diff not shown. | |||
| Offset 14547, 16 lines modified | Offset 14547, 16 lines modified | ||
| 00038d20:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00038d20:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00038d30:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00038d30:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00038d40:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00038d40:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038d50:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038d50:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038d60:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038d60:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038d70:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038d70:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038d80:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038d80:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038d90:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038d90:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00038da0:·313 | 00038da0:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00038db0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038db0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038dc0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038dc0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038dd0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038dd0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038de0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038de0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00038df0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00038df0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00038e00:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00038e00:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00038e10:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00038e10:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15367, 235 lines modified | Offset 15367, 235 lines modified | ||
| 0003c060:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003c060:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003c070:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | 0003c070:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | ||
| 0003c080:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003c080:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003c090:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003c090:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003c0a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003c0a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003c0b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003c0b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003c0c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003c0c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003c0d0:·6961·7469·6f6e·20 | 0003c0d0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | ||
| 0003c0e0:· | 0003c0e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003c0f0:· | 0003c0f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003c100:·6 | 0003c100:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003c110:·6 | 0003c110:·6170·7365·2220·6964·3d22·6964·6d38·3030··apse"·id="idm800 | ||
| 0003c120:·3 | 0003c120:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | ||
| 0003c130:· | 0003c130:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003c140:· | 0003c140:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003c150:· | 0003c150:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003c160:· | 0003c160:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003c170:· | 0003c170:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003c180:· | 0003c180:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003c190:· | 0003c190:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003c1a0:· | 0003c1a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003c1b0:· | 0003c1b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003c1c0:· | 0003c1c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003c1d0:· | 0003c1d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003c1e0:· | 0003c1e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003c1f0:· | 0003c1f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003c200:· | 0003c200:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003c210:· | 0003c210:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | ||
| 0003c220:·636b·6167·6520·2d2d·6164·643d·6169·6465··ckage·--add=aide | |||
| 0003c230:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003c240:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003c250:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003c260:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003c270:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003c280:·743d·2223·6964·6d38·3030·3322·2074·6162··t="#idm8003"·tab | |||
| 0003c290:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003c2a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003c2b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003c2c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003c2d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003c2e0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003c2f0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003c300:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c | 0003c220:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | ||
| 0003c230:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003c240:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003c250:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003c260:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003c270:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003c280:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c290:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c2a0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c2b0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c2c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c2d0:·2369·646d·3830·3033·2220·7461·6269·6e64··#idm8003"·tabind | |||
| 0003c2e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c2f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c300:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c310:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c320:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c330:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003c340:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003c350:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c3 | 0003c360:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003c370:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c380:·3830·3033·223e·3c74·6162·6c65·2063·6c61··8003"><table·cla | |||
| 0003c390:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c3a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c3b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c3c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c3d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c330:·3d22·6964·6d38·3030·3322·3e3c·7461·626c··="idm8003"><tabl | |||
| 0003c340:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c350:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c360:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c370:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c380:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c390:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c3a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c3b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c3 | 0003c3e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003c3d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c3 | 0003c3f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003c400:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003c | 0003c410:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c400:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003c410:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003c420:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c430:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003c440:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003c450:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003c460:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003c470:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003c480:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003c4 | 0003c420:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003c430:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003c440:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003c450:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003c460:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003c470:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003c480:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003c490:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003c4a0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003c4b0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003c4c0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003c4d0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003c4e0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003c4f0:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003c500:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003c510:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| Max diff block lines reached; 25285663/25318009 bytes (99.87%) of diff not shown. | |||
| Offset 14548, 15 lines modified | Offset 14548, 15 lines modified | ||
| 00038d30:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038d30:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038d40:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038d40:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038d50:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038d50:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038d60:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038d60:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038d70:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038d70:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038d80:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038d80:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038d90:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038d90:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038da0:·7320·6f66·2032·3032·3 | 00038da0:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 00038db0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038db0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038dc0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038dc0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038dd0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038dd0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038de0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038de0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038df0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038df0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038e00:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038e00:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038e10:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038e10:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15336, 235 lines modified | Offset 15336, 235 lines modified | ||
| 0003be70:·7267·6574·3d22·2369·646d·3830·3032·2220··rget="#idm8002"· | 0003be70:·7267·6574·3d22·2369·646d·3830·3032·2220··rget="#idm8002"· | ||
| 0003be80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003be80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003be90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003be90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bea0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bea0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003beb0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003beb0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bec0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bec0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bed0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bed0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bee0:·6e20· | 0003bee0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | ||
| 0003bef0:· | 0003bef0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003bf00:· | 0003bf00:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003bf10:·6 | 0003bf10:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003bf20:· | 0003bf20:·2069·643d·2269·646d·3830·3032·223e·3c74···id="idm8002"><t | ||
| 0003bf30:· | 0003bf30:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003bf40:·6 | 0003bf40:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003bf50:· | 0003bf50:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003bf60:· | 0003bf60:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003bf70:· | 0003bf70:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003bf80:·7 | 0003bf80:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003bf90:· | 0003bf90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bfa0:· | 0003bfa0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003bfb0:· | 0003bfb0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003bfc0:· | 0003bfc0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003bfd0:· | 0003bfd0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003bfe0:· | 0003bfe0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bff0:· | 0003bff0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003c000:· | 0003c000:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | ||
| 0003c010:· | 0003c010:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003c020:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003c030:·202d·2d61·6464·3d61·6964·650a·3c2f·636f···--add=aide.</co | |||
| 0003c040:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003c050:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003c060:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003c070:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003c080:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003c090:·646d·3830·3033·2220·7461·6269·6e64·6578··dm8003"·tabindex | |||
| 0003c0a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003c0b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003c0c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003c0d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003c0e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003c0f0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003c100:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c110:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c120:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c130:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c140:·3830·3033·223e·3c74·6162·6c65·2063·6c61··8003"><table·cla | |||
| 0003c150:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c160:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c170:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c180:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c190:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c1a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c | 0003c020:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | ||
| 0003c030:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003c040:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003c050:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003c060:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003c070:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003c080:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003c090:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c0a0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c0b0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c0c0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c0d0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c0e0:·3030·3322·2074·6162·696e·6465·783d·2230··003"·tabindex="0 | |||
| 0003c0f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c100:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c110:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c120:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c130:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c140:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003c150:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003c160:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c170:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c180:·7365·2220·6964·3d22·6964·6d38·3030·3322··se"·id="idm8003" | |||
| 0003c190:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c1a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c1b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c1c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c1d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c1 | 0003c1e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003c1 | 0003c1f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003c1e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003c1f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003c200:·3 | 0003c200:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003c210:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c220:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003c2 | 0003c230:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003c220:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003c230:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003c240:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003c250:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003c260:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003c270:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003c280:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003c2 | 0003c240:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003c250:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c260:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c270:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c280:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003c290:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003c2a0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003c2b0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003c2c0:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003c2d0:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003c2e0:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003c2f0:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003c300:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003c310:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003c320:·3b20·7468·656e·0a20·2020·2079·756d·2069··;·then.····yum·i | |||
| 0003c330:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| Max diff block lines reached; 10712147/10744355 bytes (99.70%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 133, 33 lines modified | Offset 133, 41 lines modified | ||
| 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 137 | ············_\x8c_\x8i_\x8s············5.3.1 | 137 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=aide | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | include·install_aide | 145 | include·install_aide |
| 152 | class·install_aide·{ | 146 | class·install_aide·{ |
| 153 | ··package·{·'aide': | 147 | ··package·{·'aide': |
| 154 | ····ensure·=>·'installed', | 148 | ····ensure·=>·'installed', |
| 155 | ··} | 149 | ··} |
| 156 | } | 150 | } |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 158 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 159 | ····yum·install·-y·"aide" | ||
| 160 | fi | ||
| 161 | else | ||
| 162 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 163 | fi | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | -·name:·Ensure·aide·is·installed | 169 | -·name:·Ensure·aide·is·installed |
| 163 | ··package: | 170 | ··package: |
| Offset 179, 36 lines modified | Offset 187, 28 lines modified | ||
| 179 | ··-·no_reboot_needed | 187 | ··-·no_reboot_needed |
| 180 | ··-·package_aide_installed | 188 | ··-·package_aide_installed |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 182 | [[packages]] | 190 | [[packages]] |
| 183 | name·=·"aide" | 191 | name·=·"aide" |
| 184 | version·=·"*" | 192 | version·=·"*" |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 192 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 193 | ····yum·install·-y·"aide" | ||
| 194 | fi | ||
| 198 | package·install·aide | ||
| 195 | else | ||
| 196 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 197 | fi | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 203 | package· | 204 | package·--add=aide |
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | Run·the·following·command·to·generate·a·new·database: | 206 | Run·the·following·command·to·generate·a·new·database: |
| 206 | $·sudo·/usr/sbin/aide·--init | 207 | $·sudo·/usr/sbin/aide·--init |
| 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 209 | To·initiate·a·manual·check,·run·the·following·command: | 210 | To·initiate·a·manual·check,·run·the·following·command: |
| 210 | $·sudo·/usr/sbin/aide·--check | 211 | $·sudo·/usr/sbin/aide·--check |
| Offset 226, 14 lines modified | Offset 226, 28 lines modified | ||
| 226 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 226 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 227 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 229 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 230 | ············_\x8c_\x8i_\x8s············5.3.1 | 230 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 234 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 235 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 236 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 237 | ····yum·install·-y·"aide" | ||
| 238 | fi | ||
| 239 | /usr/sbin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1317496/1323342 bytes (99.56%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2020·2861·7320·6f66·2032·3032·3 | 00038db0:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 00038dc0:·2d3 | 00038dc0:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15327, 235 lines modified | Offset 15327, 235 lines modified | ||
| 0003bde0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003bde0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003bdf0:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | 0003bdf0:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | ||
| 0003be00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003be00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003be10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003be10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003be20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003be20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003be30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003be30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003be40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003be40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003be50:·6469·6174·696f·6e20· | 0003be50:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003be60:· | 0003be60:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003be70:· | 0003be70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003be80:· | 0003be80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003be90:·6 | 0003be90:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | ||
| 0003bea0:·3 | 0003bea0:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | ||
| 0003beb0:· | 0003beb0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003bec0:·7 | 0003bec0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003bed0:· | 0003bed0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003bee0:·6 | 0003bee0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003bef0:· | 0003bef0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003bf00:· | 0003bf00:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003bf10:· | 0003bf10:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003bf20:·6 | 0003bf20:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003bf30:· | 0003bf30:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003bf40:· | 0003bf40:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003bf50:·6 | 0003bf50:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003bf60:· | 0003bf60:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003bf70:· | 0003bf70:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003bf80:· | 0003bf80:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003bf90:· | 0003bf90:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | ||
| 0003bfa0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003bfb0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003bfc0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003bfd0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003bfe0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003bff0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003c000:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bfa0:·6163·6b61·6765·202d·2d61·6464·3d61·6964··ackage·--add=aid | |||
| 0003bfb0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003bfc0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bfd0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bfe0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bff0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c000:·6574·3d22·2369·646d·3830·3033·2220·7461··et="#idm8003"·ta | |||
| 0003c010:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c020:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c030:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c040:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c050:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c060:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c070:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003c080:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c090:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c0a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c0b0:·643d·2269·646d·3830·3033·223e·3c74·6162··d="idm8003"><tab | |||
| 0003c0 | 0003c010:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003c0d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c0e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c0f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c100:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c110:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c120:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c | 0003c020:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003c030:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c040:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c050:·2223·6964·6d38·3030·3322·2074·6162·696e··"#idm8003"·tabin | |||
| 0003c060:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c070:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c080:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c090:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c0a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c0b0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003c0c0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003c0d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c0e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c0f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c100:·6d38·3030·3322·3e3c·7461·626c·6520·636c··m8003"><table·cl | |||
| 0003c110:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003c120:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003c130:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003c140:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003c150:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003c1 | 0003c160:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003c150:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c1 | 0003c170:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003c180:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003c1 | 0003c190:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003c180:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003c190:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003c1a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c1b0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003c1c0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003c1d0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003c1e0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003c1f0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003c200:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003c | 0003c1a0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003c1b0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003c1c0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003c1d0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003c1e0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003c1f0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003c200:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003c210:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003c220:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003c230:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003c240:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003c250:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003c260:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003c270:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 0003c280:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003c290:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| Max diff block lines reached; 10434518/10466864 bytes (99.69%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 132, 33 lines modified | Offset 132, 41 lines modified | ||
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 136 | ············_\x8c_\x8i_\x8s············5.3.1 | 136 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·--add=aide | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | include·install_aide | 144 | include·install_aide |
| 151 | class·install_aide·{ | 145 | class·install_aide·{ |
| 152 | ··package·{·'aide': | 146 | ··package·{·'aide': |
| 153 | ····ensure·=>·'installed', | 147 | ····ensure·=>·'installed', |
| 154 | ··} | 148 | ··} |
| 155 | } | 149 | } |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 156 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 157 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 158 | ····yum·install·-y·"aide" | ||
| 159 | fi | ||
| 160 | else | ||
| 161 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 162 | fi | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | -·name:·Ensure·aide·is·installed | 168 | -·name:·Ensure·aide·is·installed |
| 162 | ··package: | 169 | ··package: |
| Offset 178, 36 lines modified | Offset 186, 28 lines modified | ||
| 178 | ··-·no_reboot_needed | 186 | ··-·no_reboot_needed |
| 179 | ··-·package_aide_installed | 187 | ··-·package_aide_installed |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 181 | [[packages]] | 189 | [[packages]] |
| 182 | name·=·"aide" | 190 | name·=·"aide" |
| 183 | version·=·"*" | 191 | version·=·"*" |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 190 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 191 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 192 | ····yum·install·-y·"aide" | ||
| 193 | fi | ||
| 197 | package·install·aide | ||
| 194 | else | ||
| 195 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 196 | fi | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 202 | package· | 203 | package·--add=aide |
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 205 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 207 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 208 | To·initiate·a·manual·check,·run·the·following·command: | 209 | To·initiate·a·manual·check,·run·the·following·command: |
| 209 | $·sudo·/usr/sbin/aide·--check | 210 | $·sudo·/usr/sbin/aide·--check |
| Offset 225, 14 lines modified | Offset 225, 28 lines modified | ||
| 225 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 225 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 229 | ············_\x8c_\x8i_\x8s············5.3.1 | 229 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 230 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 230 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 231 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 231 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 233 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 234 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 235 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 236 | ····yum·install·-y·"aide" | ||
| 237 | fi | ||
| 238 | /usr/sbin/aide·--init | ||
| 239 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 240 | else | ||
| 241 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 242 | fi | ||
| 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 233 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 234 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1288217/1294063 bytes (99.55%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2020·2861·7320·6f66·2032·3032·3 | 00038db0:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 00038dc0:·2d3 | 00038dc0:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15359, 235 lines modified | Offset 15359, 235 lines modified | ||
| 0003bfe0:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | 0003bfe0:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | ||
| 0003bff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003c000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003c010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003c020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003c030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003c040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c050:·20 | 0003c050:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | ||
| 0003c060:· | 0003c060:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003c070:· | 0003c070:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003c080:·6 | 0003c080:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003c090:· | 0003c090:·6964·3d22·6964·6d38·3030·3222·3e3c·7461··id="idm8002"><ta | ||
| 0003c0a0:· | 0003c0a0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003c0b0:· | 0003c0b0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003c0c0:· | 0003c0c0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003c0d0:· | 0003c0d0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003c0e0:· | 0003c0e0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003c0f0:· | 0003c0f0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003c100:· | 0003c100:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c110:· | 0003c110:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003c120:· | 0003c120:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003c130:· | 0003c130:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003c140:· | 0003c140:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003c150:· | 0003c150:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c160:· | 0003c160:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003c170:· | 0003c170:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003c180:· | 0003c180:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003c190:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003c1a0:·2d2d·6164·643d·6169·6465·0a3c·2f63·6f64··--add=aide.</cod | |||
| 0003c1b0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c1c0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c1d0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c1e0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c200:·6d38·3030·3322·2074·6162·696e·6465·783d··m8003"·tabindex= | |||
| 0003c210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c260:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003c270:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c280:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c290:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c2a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003c2b0:·3030·3322·3e3c·7461·626c·6520·636c·6173··003"><table·clas | |||
| 0003c2c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c2d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c2e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c2f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c300:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c310:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c | 0003c190:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | ||
| 0003c1a0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003c1b0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003c1c0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003c1d0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003c1e0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003c1f0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003c200:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003c210:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003c220:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003c230:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003c240:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003c250:·3033·2220·7461·6269·6e64·6578·3d22·3022··03"·tabindex="0" | |||
| 0003c260:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003c270:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003c280:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003c290:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003c2a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c2b0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003c2c0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003c2d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c2e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c2f0:·6522·2069·643d·2269·646d·3830·3033·223e··e"·id="idm8003"> | |||
| 0003c300:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c310:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c320:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c330:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c340:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c3 | 0003c350:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003c3 | 0003c360:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003c350:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c360:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c370:· | 0003c370:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003c380:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c390:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003c3 | 0003c3a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003c390:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003c3a0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003c3b0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003c3c0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003c3d0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003c3e0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003c3f0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003c | 0003c3b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003c3c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003c3d0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003c3e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c3f0:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003c400:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003c410:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003c420:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003c430:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003c440:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003c450:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003c460:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003c470:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003c480:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003c490:·2074·6865·6e0a·2020·2020·7975·6d20·696e···then.····yum·in | |||
| Max diff block lines reached; 25098631/25130977 bytes (99.87%) of diff not shown. | |||
| Offset 14583, 15 lines modified | Offset 14583, 15 lines modified | ||
| 00038f60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038f60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038f70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038f70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038f80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038f80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038f90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038f90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038fa0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038fa0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038fb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038fb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038fc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038fc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038fd0:·3 | 00038fd0:·352d·3132·2d31·3129·0a20·2020·2020·2020··5-12-11).······· | ||
| 00038fe0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038fe0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038ff0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038ff0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039000:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039000:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039010:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039010:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039020:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039020:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039030:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039030:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039040:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00039040:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15358, 235 lines modified | Offset 15358, 235 lines modified | ||
| 0003bfd0:·6172·6765·743d·2223·6964·6d38·3030·3222··arget="#idm8002" | 0003bfd0:·6172·6765·743d·2223·6964·6d38·3030·3222··arget="#idm8002" | ||
| 0003bfe0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bfe0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bff0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bff0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c000:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003c000:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c010:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003c010:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c020:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003c020:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c030:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003c030:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c040:·6f6e·20 | 0003c040:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | ||
| 0003c050:·7 | 0003c050:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003c060:· | 0003c060:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003c070:· | 0003c070:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003c080:· | 0003c080:·2220·6964·3d22·6964·6d38·3030·3222·3e3c··"·id="idm8002">< | ||
| 0003c090:· | 0003c090:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003c0a0:·6 | 0003c0a0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003c0b0:· | 0003c0b0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003c0c0:· | 0003c0c0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003c0d0:· | 0003c0d0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003c0e0:·6 | 0003c0e0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003c0f0:· | 0003c0f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c100:· | 0003c100:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003c110:· | 0003c110:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003c120:· | 0003c120:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003c130:· | 0003c130:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003c140:· | 0003c140:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c150:· | 0003c150:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003c160:· | 0003c160:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003c170:· | 0003c170:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003c180:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003c190:·6520·2d2d·6164·643d·6169·6465·0a3c·2f63··e·--add=aide.</c | |||
| 0003c1a0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c1b0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003c1c0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003c1d0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c1f0:·6964·6d38·3030·3322·2074·6162·696e·6465··idm8003"·tabinde | |||
| 0003c200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003c250:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003c260:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003c270:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c280:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c290:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c2a0:·6d38·3030·3322·3e3c·7461·626c·6520·636c··m8003"><table·cl | |||
| 0003c2b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003c2c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003c2d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003c2e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003c2f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003c300:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c | 0003c180:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | ||
| 0003c190:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003c1a0:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003c1b0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003c1c0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003c1d0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003c1e0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003c1f0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003c200:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003c210:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003c220:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003c230:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c240:·3830·3033·2220·7461·6269·6e64·6578·3d22··8003"·tabindex=" | |||
| 0003c250:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c260:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c270:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c280:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c290:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c2a0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003c2b0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003c2c0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c2d0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c2e0:·7073·6522·2069·643d·2269·646d·3830·3033··pse"·id="idm8003 | |||
| 0003c2f0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c300:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c310:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c320:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c330:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c3 | 0003c340:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003c3 | 0003c350:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003c340:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003c3 | 0003c360:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003c370:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c3 | 0003c380:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003c3 | 0003c390:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003c380:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003c390:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003c3a0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003c3b0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003c3c0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003c3d0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003c3e0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003c3 | 0003c3a0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003c3b0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c3c0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c3d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c3e0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003c3f0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003c400:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003c410:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003c420:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003c430:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003c440:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003c450:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003c460:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003c470:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003c480:·203b·2074·6865·6e0a·2020·2020·7975·6d20···;·then.····yum· | |||
| 0003c490:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003c4a0:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| Max diff block lines reached; 9094164/9126372 bytes (99.65%) of diff not shown. | |||
| Offset 79, 15 lines modified | Offset 79, 15 lines modified | ||
| 79 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 79 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 80 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 80 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 81 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 81 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 82 | ····*·cpe:/o:redhat:enterprise_linux:8 | 82 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 83 | ····*·cpe:/o:centos:centos:8 | 83 | ····*·cpe:/o:centos:centos:8 |
| 84 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 84 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 85 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 85 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 86 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 86 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 87 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 87 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 88 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 89 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 90 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 90 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 91 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 91 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 92 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 92 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 93 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 93 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 138, 33 lines modified | Offset 138, 41 lines modified | ||
| 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 142 | ············_\x8c_\x8i_\x8s············5.3.1 | 142 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | package·--add=aide | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | include·install_aide | 150 | include·install_aide |
| 157 | class·install_aide·{ | 151 | class·install_aide·{ |
| 158 | ··package·{·'aide': | 152 | ··package·{·'aide': |
| 159 | ····ensure·=>·'installed', | 153 | ····ensure·=>·'installed', |
| 160 | ··} | 154 | ··} |
| 161 | } | 155 | } |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 163 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 164 | ····yum·install·-y·"aide" | ||
| 165 | fi | ||
| 166 | else | ||
| 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 168 | fi | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | -·name:·Ensure·aide·is·installed | 174 | -·name:·Ensure·aide·is·installed |
| 168 | ··package: | 175 | ··package: |
| Offset 184, 36 lines modified | Offset 192, 28 lines modified | ||
| 184 | ··-·no_reboot_needed | 192 | ··-·no_reboot_needed |
| 185 | ··-·package_aide_installed | 193 | ··-·package_aide_installed |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 187 | [[packages]] | 195 | [[packages]] |
| 188 | name·=·"aide" | 196 | name·=·"aide" |
| 189 | version·=·"*" | 197 | version·=·"*" |
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 195 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 196 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 197 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 198 | ····yum·install·-y·"aide" | ||
| 199 | fi | ||
| 203 | package·install·aide | ||
| 200 | else | ||
| 201 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 202 | fi | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 208 | package· | 209 | package·--add=aide |
| 209 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 210 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 210 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 211 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 211 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 212 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 212 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 213 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 214 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 228, 14 lines modified | Offset 228, 27 lines modified | ||
| 228 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 228 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 229 | ············_\x8i_\x8s_\x8m······1446 | 229 | ············_\x8i_\x8s_\x8m······1446 |
| 230 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 230 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 231 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 231 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 232 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 232 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 236 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 237 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 238 | fips-mode-setup·--enable | ||
| 239 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 240 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 241 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 242 | fi | ||
| 243 | else | ||
| 244 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 245 | fi | ||
| 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 236 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 247 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 237 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 248 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 238 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 249 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| Max diff block lines reached; 1244904/1251279 bytes (99.49%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038d40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038d50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038d50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038d60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038d60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038d70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038d70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038d80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038d80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038d90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038d90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2028·6173·206f·6620·3230·323 | 00038db0:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00038dc0:·3 | 00038dc0:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 00038dd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00038dd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00038de0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00038de0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00038df0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00038df0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038e00:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038e00:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038e10:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038e10:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038e20:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038e20:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038e30:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038e30:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15402, 301 lines modified | Offset 15402, 301 lines modified | ||
| 0003c290:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c290:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c2a0:·6964·6d37·3636·3222·2074·6162·696e·6465··idm7662"·tabinde | 0003c2a0:·6964·6d37·3636·3222·2074·6162·696e·6465··idm7662"·tabinde | ||
| 0003c2b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c2b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c2c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c2c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c2d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c2d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c2e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c2e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c2f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c2f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c300:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003c310:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c320:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c330:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c340:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003c350:·3636·3222·3e3c·7072·653e·3c63·6f64·653e··662"><pre><code> | |||
| 0003c360:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | |||
| 0003c370:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | |||
| 0003c380:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | |||
| 0003c390:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | |||
| 0003c3a0:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | |||
| 0003c3b0:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | |||
| 0003c3c0:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | |||
| 0003c3d0:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | |||
| 0003c3e0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003c3f0:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | |||
| 0003c400:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | |||
| 0003c410:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | |||
| 0003c420:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | |||
| 0003c430:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | |||
| 0003c440:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003c450:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | |||
| 0003c460:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | |||
| 0003c470:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | |||
| 0003c480:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | |||
| 0003c490:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | |||
| 0003c4a0:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | |||
| 0003c4b0:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | |||
| 0003c4c0:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | |||
| 0003c4d0:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | |||
| 0003c4e0:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | |||
| 0003c4f0:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | |||
| 0003c500:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003c510:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | |||
| 0003c520:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | |||
| 0003c530:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | |||
| 0003c540:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | |||
| 0003c550:·7461·6c6c·0a20·2020·200a·6669·0a3c·2f63··tall.····.fi.</c | |||
| 0003c560:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c570:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003c580:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003c590:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c5a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c5b0:·6964·6d37·3636·3322·2074·6162·696e·6465··idm7663"·tabinde | |||
| 0003c5c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c5d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c5e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c5f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c600:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003c | 0003c610:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003c | 0003c620:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003c | 0003c630:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003c | 0003c640:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003c | 0003c650:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003c | 0003c660:·646d·3736·3633·223e·3c74·6162·6c65·2063··dm7663"><table·c | ||
| 0003c | 0003c670:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003c | 0003c680:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003c | 0003c690:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003c | 0003c6a0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003c | 0003c6b0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003c | 0003c6c0:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003c | 0003c6d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003c | 0003c6e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003c | 0003c6f0:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003c | 0003c700:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003c | 0003c710:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003c | 0003c720:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003c | 0003c730:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003c | 0003c740:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003c | 0003c750:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003c | 0003c760:·3c63·6f64·653e·2d20·6e61·6d65·3a20·2753··<code>-·name:·'S | ||
| 0003c | 0003c770:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003c | 0003c780:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003c | 0003c790:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003c | 0003c7a0:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003c | 0003c7b0:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003c | 0003c7c0:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003c | 0003c7d0:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003c | 0003c7e0:·656e·3a20·616e·7369·626c·655f·6469·7374··en:·ansible_dist | ||
| 0003c | 0003c7f0:·7269·6275·7469·6f6e·2069·6e20·5b20·2246··ribution·in·[·"F | ||
| 0003c | 0003c800:·6564·6f72·6122·2c20·2252·6564·4861·7422··edora",·"RedHat" | ||
| 0003c | 0003c810:·2c20·2243·656e·744f·5322·2c20·224f·7261··,·"CentOS",·"Ora | ||
| 0003c | 0003c820:·636c·654c·696e·7578·2220·5d0a·2020·7461··cleLinux"·].··ta | ||
| 0003c | 0003c830:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003c | 0003c840:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003c | 0003c850:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003c | 0003c860:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003c | 0003c870:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003c | 0003c880:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003c | 0003c890:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003c | 0003c8a0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003c | 0003c8b0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003c | 0003c8c0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003c | 0003c8d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c | 0003c8e0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003c | 0003c8f0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003c | 0003c900:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003c | 0003c910:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003c | 0003c920:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003c | 0003c930:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003c | 0003c940:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003c | 0003c950:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003c | 0003c960:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| Max diff block lines reached; 6495959/6537413 bytes (99.37%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 82 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 83 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 83 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 84 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 84 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 132, 14 lines modified | Offset 132, 27 lines modified | ||
| 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 141 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 142 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 143 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 144 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 145 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 146 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 144 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 152 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 145 | ··set_fact: | 153 | ··set_fact: |
| Offset 266, 27 lines modified | Offset 279, 14 lines modified | ||
| 266 | ··-·PCI-DSSv4-11.5.2 | 279 | ··-·PCI-DSSv4-11.5.2 |
| 267 | ··-·high_complexity | 280 | ··-·high_complexity |
| 268 | ··-·high_severity | 281 | ··-·high_severity |
| 269 | ··-·medium_disruption | 282 | ··-·medium_disruption |
| 270 | ··-·no_reboot_needed | 283 | ··-·no_reboot_needed |
| 271 | ··-·restrict_strategy | 284 | ··-·restrict_strategy |
| 272 | ··-·rpm_verify_hashes | 285 | ··-·rpm_verify_hashes |
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 274 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 275 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 276 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 277 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 278 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 279 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 280 | fi | ||
| 281 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 286 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 282 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 287 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 283 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 288 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 284 | run·the·following·command·to·determine·which·package·owns·it: | 289 | run·the·following·command·to·determine·which·package·owns·it: |
| 285 | $·rpm·-qf·FILENAME | 290 | $·rpm·-qf·FILENAME |
| 286 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 291 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 287 | $·sudo·rpm·--setugids·PACKAGENAME | 292 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 305, 14 lines modified | Offset 305, 40 lines modified | ||
| 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 317 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 318 | declare·-A·SETPERMS_RPM_DICT | ||
| 319 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 320 | #·is·expected·by·the·RPM·database | ||
| 321 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 322 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 323 | do | ||
| 324 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 325 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 326 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 327 | done | ||
| 328 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 329 | #·correct·values | ||
| 330 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 331 | do | ||
| 332 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 333 | done | ||
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 317 | -·name:·Read·list·of·files·with·incorrect·ownership | 339 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 318 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 340 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 387, 40 lines modified | Offset 413, 14 lines modified | ||
| 387 | ··-·PCI-DSSv4-11.5.2 | 413 | ··-·PCI-DSSv4-11.5.2 |
| 388 | ··-·high_complexity | 414 | ··-·high_complexity |
| 389 | ··-·high_severity | 415 | ··-·high_severity |
| 390 | ··-·medium_disruption | 416 | ··-·medium_disruption |
| 391 | ··-·no_reboot_needed | 417 | ··-·no_reboot_needed |
| 392 | ··-·restrict_strategy | 418 | ··-·restrict_strategy |
| 393 | ··-·rpm_verify_ownership | 419 | ··-·rpm_verify_ownership |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 399 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 706214/713946 bytes (98.92%) of diff not shown. | |||
| Offset 14569, 15 lines modified | Offset 14569, 15 lines modified | ||
| 00038e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038ef0:·206f·6620·3230·323 | 00038ef0:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00038f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15428, 301 lines modified | Offset 15428, 301 lines modified | ||
| 0003c430:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003c430:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c440:·2223·6964·6d37·3636·3222·2074·6162·696e··"#idm7662"·tabin | 0003c440:·2223·6964·6d37·3636·3222·2074·6162·696e··"#idm7662"·tabin | ||
| 0003c450:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003c450:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c460:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003c460:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c470:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003c470:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c480:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003c480:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003c490:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003c490:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c4a0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003c4a0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003c4b0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003c4c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c4d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c4e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c4f0:·6d37·3636·3222·3e3c·7072·653e·3c63·6f64··m7662"><pre><cod | |||
| 0003c500:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003c510:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003c520:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003c530:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003c540:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003c550:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003c560:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003c570:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003c4b0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003c4c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c4d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c4e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c4f0:·2269·646d·3736·3632·223e·3c74·6162·6c65··"idm7662"><table | |||
| 0003c500:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c510:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c520:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c530:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c540:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c550:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | |||
| 0003c560:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c570:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c580:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0003c590:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c5a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c5b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c5c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c5d0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003c5e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c5f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003c600:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | |||
| 0003c610:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | |||
| 0003c620:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | |||
| 0003c630:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | |||
| 0003c640:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | |||
| 0003c650:·696e·7374·616c·6c5f·636d·643a·2079·756d··install_cmd:·yum | |||
| 0003c660:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | |||
| 0003c670:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | |||
| 0003c680:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | |||
| 0003c690:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | |||
| 0003c6a0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | |||
| 0003c6b0:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | |||
| 0003c6c0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003c6d0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | |||
| 0003c6e0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | |||
| 0003c6f0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003c700:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | |||
| 0003c710:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | |||
| 0003c720:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003c730:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | |||
| 0003c740:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | |||
| 0003c750:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | |||
| 0003c760:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | |||
| 0003c770:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | |||
| 0003c780:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | |||
| 0003c790:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | |||
| 0003c7a0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003c7b0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003c7c0:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | |||
| 0003c7d0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | |||
| 0003c7e0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | |||
| 0003c7f0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | |||
| 0003c800:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c810:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | |||
| 0003c820:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | |||
| 0003c830:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | |||
| 0003c840:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | |||
| 0003c850:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | |||
| 0003c860:·696e·7374·616c·6c20·636f·6d6d·616e·6420··install·command· | |||
| 0003c870:·287a·7970·7065·7229·270a·2020·7365·745f··(zypper)'.··set_ | |||
| 0003c880:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | |||
| 0003c890:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | |||
| 0003c8a0:·616c·6c5f·636d·643a·207a·7970·7065·7220··all_cmd:·zypper· | |||
| 0003c8b0:·696e·202d·6620·2d79·0a20·2077·6865·6e3a··in·-f·-y.··when: | |||
| 0003c8c0:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | |||
| 0003c8d0:·7574·696f·6e20·3d3d·2022·534c·4553·220a··ution·==·"SLES". | |||
| 0003c8e0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003c8f0:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | |||
| 0003c900:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | |||
| 0003c910:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | |||
| 0003c920:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | |||
| 0003c930:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | |||
| 0003c940:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c950:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | |||
| 0003c960:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | |||
| 0003c970:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c980:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | |||
| 0003c990:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | |||
| 0003c9a0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | |||
| 0003c9b0:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | |||
| 0003c9c0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003c9d0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003c9e0:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | |||
| 0003c9f0:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | |||
| 0003ca00:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | |||
| 0003ca10:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | |||
| 0003ca20:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003ca30:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | |||
| 0003ca40:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | |||
| Max diff block lines reached; 17221992/17247576 bytes (99.85%) of diff not shown. | |||
| Offset 75, 15 lines modified | Offset 75, 15 lines modified | ||
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 78 | ····*·cpe:/o:redhat:enterprise_linux:8 | 78 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 79 | ····*·cpe:/o:centos:centos:8 | 79 | ····*·cpe:/o:centos:centos:8 |
| 80 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 80 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 81 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 81 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 82 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 82 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 83 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 83 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 84 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 84 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 85 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 85 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 86 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 86 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 87 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 87 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 88 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 88 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 89 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 89 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 138, 14 lines modified | Offset 138, 27 lines modified | ||
| 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 147 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 148 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 149 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 150 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 151 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 152 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 150 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 158 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 151 | ··set_fact: | 159 | ··set_fact: |
| Offset 272, 27 lines modified | Offset 285, 14 lines modified | ||
| 272 | ··-·PCI-DSSv4-11.5.2 | 285 | ··-·PCI-DSSv4-11.5.2 |
| 273 | ··-·high_complexity | 286 | ··-·high_complexity |
| 274 | ··-·high_severity | 287 | ··-·high_severity |
| 275 | ··-·medium_disruption | 288 | ··-·medium_disruption |
| 276 | ··-·no_reboot_needed | 289 | ··-·no_reboot_needed |
| 277 | ··-·restrict_strategy | 290 | ··-·restrict_strategy |
| 278 | ··-·rpm_verify_hashes | 291 | ··-·rpm_verify_hashes |
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 280 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 281 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 282 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 283 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 284 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 285 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 286 | fi | ||
| 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 292 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 288 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 293 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 289 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 294 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 290 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 295 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 291 | $·rpm·-qf·FILENAME | 296 | $·rpm·-qf·FILENAME |
| 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 297 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 313, 14 lines modified | Offset 313, 44 lines modified | ||
| 313 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 313 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 314 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 314 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 315 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 315 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 316 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 316 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 317 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 317 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 318 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 318 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 319 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 319 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 325 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 326 | declare·-A·SETPERMS_RPM_DICT | ||
| 327 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 328 | #·is·expected·by·the·RPM·database | ||
| 329 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 330 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 331 | do | ||
| 332 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 333 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 334 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 335 | ········do | ||
| 336 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 337 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 338 | ········done | ||
| 339 | done | ||
| 340 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 341 | #·correct·values | ||
| 342 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 343 | do | ||
| 344 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 345 | done | ||
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 347 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 348 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 349 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 350 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 325 | -·name:·Read·list·of·files·with·incorrect·permissions | 351 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 326 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 352 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 398, 44 lines modified | Offset 428, 14 lines modified | ||
| 398 | ··-·PCI-DSSv4-11.5.2 | 428 | ··-·PCI-DSSv4-11.5.2 |
| 399 | ··-·high_complexity | 429 | ··-·high_complexity |
| 400 | ··-·high_severity | 430 | ··-·high_severity |
| 401 | ··-·medium_disruption | 431 | ··-·medium_disruption |
| 402 | ··-·no_reboot_needed | 432 | ··-·no_reboot_needed |
| 403 | ··-·restrict_strategy | 433 | ··-·restrict_strategy |
| 404 | ··-·rpm_verify_permissions | 434 | ··-·rpm_verify_permissions |
| 405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 406 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 407 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1337808/1345924 bytes (99.40%) of diff not shown. | |||
| Offset 14562, 15 lines modified | Offset 14562, 15 lines modified | ||
| 00038e10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038e10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038e20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038e20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038e30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038e30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038e40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038e40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038e50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038e50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038e60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038e60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038e70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038e70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038e80:·206f·6620·3230·323 | 00038e80:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00038e90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038e90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038ea0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038ea0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038eb0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038eb0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038ec0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038ec0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038ed0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038ed0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038ee0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038ee0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038ef0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038ef0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15437, 300 lines modified | Offset 15437, 300 lines modified | ||
| 0003c4c0:·6574·3d22·2369·646d·3736·3632·2220·7461··et="#idm7662"·ta | 0003c4c0:·6574·3d22·2369·646d·3736·3632·2220·7461··et="#idm7662"·ta | ||
| 0003c4d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003c4d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003c4e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003c4e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c4f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003c4f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c500:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003c500:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c510:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003c510:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003c520:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003c520:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c530:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003c540:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c550:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c560:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c570:·2269·646d·3736·3632·223e·3c70·7265·3e3c··"idm7662"><pre>< | |||
| 0003c580:·636f·6465·3e0a·2320·4669·6e64·2077·6869··code>.#·Find·whi | |||
| 0003c590:·6368·2066·696c·6573·2068·6176·6520·696e··ch·files·have·in | |||
| 0003c5a0:·636f·7272·6563·7420·6861·7368·2028·6e6f··correct·hash·(no | |||
| 0003c5b0:·7420·696e·202f·6574·632c·2062·6563·6175··t·in·/etc,·becau | |||
| 0003c5c0:·7365·206f·6620·7468·6520·7379·7374·656d··se·of·the·system | |||
| 0003c5d0:·2072·656c·6174·6564·2063·6f6e·6669·6720···related·config· | |||
| 0003c5e0:·6669·6c65·7329·2061·6e64·2074·6865·6e20··files)·and·then· | |||
| 0003c5f0:·6765·7420·6669·6c65·7320·6e61·6d65·730a··get·files·names. | |||
| 0003c600:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003c610:·7265·6374·5f68·6173·683d·2224·2872·706d··rect_hash="$(rpm | |||
| 0003c620:·202d·5661·202d·2d6e·6f63·6f6e·6669·6720···-Va·--noconfig· | |||
| 0003c630:·7c20·6772·6570·202d·4520·275e·2e2e·3527··|·grep·-E·'^..5' | |||
| 0003c640:·207c·2061·776b·2027·7b70·7269·6e74·2024···|·awk·'{print·$ | |||
| 0003c650:·4e46·7d27·2029·220a·0a69·6620·5b20·2d6e··NF}'·)"..if·[·-n | |||
| 0003c660:·2022·2466·696c·6573·5f77·6974·685f·696e···"$files_with_in | |||
| 0003c670:·636f·7272·6563·745f·6861·7368·2220·5d3b··correct_hash"·]; | |||
| 0003c680:·2074·6865·6e0a·2020·2020·2320·4672·6f6d···then.····#·From | |||
| 0003c690:·2066·696c·6573·206e·616d·6573·2067·6574···files·names·get | |||
| 0003c6a0:·2070·6163·6b61·6765·206e·616d·6573·2061···package·names·a | |||
| 0003c6b0:·6e64·2063·6861·6e67·6520·6e65·776c·696e··nd·change·newlin | |||
| 0003c6c0:·6520·746f·2073·7061·6365·2c20·6265·6361··e·to·space,·beca | |||
| 0003c6d0:·7573·6520·7270·6d20·7772·6974·6573·2065··use·rpm·writes·e | |||
| 0003c6e0:·6163·6820·7061·636b·6167·6520·746f·206e··ach·package·to·n | |||
| 0003c6f0:·6577·206c·696e·650a·2020·2020·7061·636b··ew·line.····pack | |||
| 0003c700:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | |||
| 0003c710:·6c3d·2224·2872·706d·202d·7166·2024·6669··l="$(rpm·-qf·$fi | |||
| 0003c720:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003c730:·6374·5f68·6173·6820·7c20·7472·2027·5c6e··ct_hash·|·tr·'\n | |||
| 0003c740:·2720·2720·2729·220a·0a20·2020·200a·2020··'·'·')"..····.·· | |||
| 0003c750:·2020·7975·6d20·7265·696e·7374·616c·6c20····yum·reinstall· | |||
| 0003c760:·2d79·2024·7061·636b·6167·6573·5f74·6f5f··-y·$packages_to_ | |||
| 0003c770:·7265·696e·7374·616c·6c0a·2020·2020·0a66··reinstall.····.f | |||
| 0003c780:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003c790:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003c7a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003c7b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003c7c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c7d0:·6574·3d22·2369·646d·3736·3633·2220·7461··et="#idm7663"·ta | |||
| 0003c7e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c7f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c | 0003c840:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003c | 0003c850:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003c | 0003c860:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003c | 0003c870:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003c | 0003c880:·6964·3d22·6964·6d37·3636·3322·3e3c·7461··id="idm7663"><ta | ||
| 0003c | 0003c890:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003c | 0003c8a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003c | 0003c8b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003c | 0003c8c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003c | 0003c8d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003c | 0003c8e0:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003c | 0003c8f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c | 0003c900:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003c | 0003c910:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003c | 0003c920:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003c | 0003c930:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003c | 0003c940:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003c | 0003c950:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003c | 0003c960:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003c | 0003c970:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003c | 0003c980:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003c | 0003c990:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| 0003c | 0003c9a0:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | ||
| 0003c | 0003c9b0:·696e·7374·616c·6c20·636f·6d6d·616e·6427··install·command' | ||
| 0003c | 0003c9c0:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003c | 0003c9d0:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | ||
| 0003c | 0003c9e0:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | ||
| 0003c | 0003c9f0:·7975·6d20·7265·696e·7374·616c·6c20·2d79··yum·reinstall·-y | ||
| 0003c | 0003ca00:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | ||
| 0003c | 0003ca10:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003c | 0003ca20:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003c | 0003ca30:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003c | 0003ca40:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003c | 0003ca50:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003c | 0003ca60:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003c | 0003ca70:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003c | 0003ca80:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003c | 0003ca90:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003c | 0003caa0:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003c | 0003cab0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c | 0003cac0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003c | 0003cad0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003c | 0003cae0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c | 0003caf0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003c | 0003cb00:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003c | 0003cb10:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003c | 0003cb20:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003c | 0003cb30:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003c | 0003cb40:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003c | 0003cb50:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003c | 0003cb60:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003c | 0003cb70:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003c | 0003cb80:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003c | 0003cb90:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003c | 0003cba0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| Max diff block lines reached; 9943859/9985037 bytes (99.59%) of diff not shown. | |||
| Offset 73, 15 lines modified | Offset 73, 15 lines modified | ||
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 77 | ····*·cpe:/o:centos:centos:8 | 77 | ····*·cpe:/o:centos:centos:8 |
| 78 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 79 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 79 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 80 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 80 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 81 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 81 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 82 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 82 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 83 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 83 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 84 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 84 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 85 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 86 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 86 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 87 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 87 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 139, 14 lines modified | Offset 139, 27 lines modified | ||
| 139 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 139 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 140 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 140 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 141 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 141 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 142 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 142 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 144 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 144 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 148 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 149 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 150 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 151 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 152 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 153 | fi | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 151 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 159 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 152 | ··set_fact: | 160 | ··set_fact: |
| Offset 273, 27 lines modified | Offset 286, 14 lines modified | ||
| 273 | ··-·PCI-DSSv4-11.5.2 | 286 | ··-·PCI-DSSv4-11.5.2 |
| 274 | ··-·high_complexity | 287 | ··-·high_complexity |
| 275 | ··-·high_severity | 288 | ··-·high_severity |
| 276 | ··-·medium_disruption | 289 | ··-·medium_disruption |
| 277 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 278 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 279 | ··-·rpm_verify_hashes | 292 | ··-·rpm_verify_hashes |
| 280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 281 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 282 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 283 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 284 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 285 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 286 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 287 | fi | ||
| 288 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 289 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 294 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 290 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 295 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 291 | run·the·following·command·to·determine·which·package·owns·it: | 296 | run·the·following·command·to·determine·which·package·owns·it: |
| 292 | $·rpm·-qf·FILENAME | 297 | $·rpm·-qf·FILENAME |
| 293 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 298 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 294 | $·sudo·rpm·--setugids·PACKAGENAME | 299 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 312, 14 lines modified | Offset 312, 40 lines modified | ||
| 312 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 312 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 313 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 313 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 314 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 314 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 315 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 315 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 316 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 316 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 317 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 317 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 320 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 321 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 322 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 323 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 324 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 325 | declare·-A·SETPERMS_RPM_DICT | ||
| 326 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 327 | #·is·expected·by·the·RPM·database | ||
| 328 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 329 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 330 | do | ||
| 331 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 332 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 333 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 334 | done | ||
| 335 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 336 | #·correct·values | ||
| 337 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 338 | do | ||
| 339 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 340 | done | ||
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 341 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 320 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 342 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 321 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 343 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 322 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 344 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 323 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 345 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 324 | -·name:·Read·list·of·files·with·incorrect·ownership | 346 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 325 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 347 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 394, 40 lines modified | Offset 420, 14 lines modified | ||
| 394 | ··-·PCI-DSSv4-11.5.2 | 420 | ··-·PCI-DSSv4-11.5.2 |
| 395 | ··-·high_complexity | 421 | ··-·high_complexity |
| 396 | ··-·high_severity | 422 | ··-·high_severity |
| 397 | ··-·medium_disruption | 423 | ··-·medium_disruption |
| 398 | ··-·no_reboot_needed | 424 | ··-·no_reboot_needed |
| 399 | ··-·restrict_strategy | 425 | ··-·restrict_strategy |
| 400 | ··-·rpm_verify_ownership | 426 | ··-·rpm_verify_ownership |
| 401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 402 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 403 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 404 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 405 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 406 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1043166/1050898 bytes (99.26%) of diff not shown. | |||
| Offset 14556, 15 lines modified | Offset 14556, 15 lines modified | ||
| 00038db0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038db0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038dc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038dc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038dd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038dd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038de0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038de0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038df0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038df0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038e00:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038e00:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038e10:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038e10:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038e20:·2032·3032·3 | 00038e20:·2032·3032·352d·3132·2d31·3129·0a20·2020···2025-12-11).··· | ||
| 00038e30:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00038e30:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00038e40:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00038e40:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038e50:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038e50:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038e60:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038e60:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038e70:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038e70:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038e80:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038e80:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038e90:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038e90:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15331, 235 lines modified | Offset 15331, 235 lines modified | ||
| 0003be20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003be20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003be30:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | 0003be30:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | ||
| 0003be40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003be40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003be50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003be50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003be60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003be60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003be70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003be70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003be80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003be80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003be90:·6961·7469·6f6e·20 | 0003be90:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | ||
| 0003bea0:· | 0003bea0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003beb0:· | 0003beb0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003bec0:·6 | 0003bec0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003bed0:·6 | 0003bed0:·6170·7365·2220·6964·3d22·6964·6d38·3030··apse"·id="idm800 | ||
| 0003bee0:·3 | 0003bee0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | ||
| 0003bef0:· | 0003bef0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003bf00:· | 0003bf00:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003bf10:· | 0003bf10:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003bf20:· | 0003bf20:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003bf30:· | 0003bf30:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003bf40:· | 0003bf40:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003bf50:· | 0003bf50:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003bf60:· | 0003bf60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003bf70:· | 0003bf70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003bf80:· | 0003bf80:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003bf90:· | 0003bf90:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003bfa0:· | 0003bfa0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003bfb0:· | 0003bfb0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003bfc0:· | 0003bfc0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003bfd0:· | 0003bfd0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | ||
| 0003bfe0:·636b·6167·6520·2d2d·6164·643d·6169·6465··ckage·--add=aide | |||
| 0003bff0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003c000:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003c010:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003c020:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003c030:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003c040:·743d·2223·6964·6d38·3030·3322·2074·6162··t="#idm8003"·tab | |||
| 0003c050:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003c060:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003c070:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003c080:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003c090:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003c0a0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003c0b0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003c0c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003 | 0003bfe0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | ||
| 0003bff0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003c000:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003c010:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003c020:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003c030:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003c040:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c050:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c060:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c070:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c080:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c090:·2369·646d·3830·3033·2220·7461·6269·6e64··#idm8003"·tabind | |||
| 0003c0a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c0b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c0c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c0d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c0e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c0f0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003c100:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003c110:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c | 0003c120:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003c130:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c140:·3830·3033·223e·3c74·6162·6c65·2063·6c61··8003"><table·cla | |||
| 0003c150:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c160:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c170:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c180:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c190:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c0f0:·3d22·6964·6d38·3030·3322·3e3c·7461·626c··="idm8003"><tabl | |||
| 0003c100:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c110:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c120:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c130:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c140:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c150:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c160:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c170:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c1 | 0003c1a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003c190:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c1 | 0003c1b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003c1c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003c1 | 0003c1d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c1c0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003c1d0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003c1e0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c1f0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003c200:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003c210:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003c220:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003c230:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003c240:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003c | 0003c1e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003c1f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003c200:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003c210:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003c220:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003c230:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003c240:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003c250:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003c260:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003c270:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003c280:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003c290:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003c2a0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003c2b0:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003c2c0:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003c2d0:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003c2e0:·7975·6d20·696e·7374·616c·6c20·2d79·2022··yum·install·-y·" | |||
| Max diff block lines reached; 9092922/9125130 bytes (99.65%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 84 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 85 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 130, 33 lines modified | Offset 130, 41 lines modified | ||
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ············_\x8c_\x8i_\x8s············5.3.1 | 134 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package·--add=aide | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | include·install_aide | 142 | include·install_aide |
| 149 | class·install_aide·{ | 143 | class·install_aide·{ |
| 150 | ··package·{·'aide': | 144 | ··package·{·'aide': |
| 151 | ····ensure·=>·'installed', | 145 | ····ensure·=>·'installed', |
| 152 | ··} | 146 | ··} |
| 153 | } | 147 | } |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 155 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 156 | ····yum·install·-y·"aide" | ||
| 157 | fi | ||
| 158 | else | ||
| 159 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 160 | fi | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | -·name:·Ensure·aide·is·installed | 166 | -·name:·Ensure·aide·is·installed |
| 160 | ··package: | 167 | ··package: |
| Offset 176, 36 lines modified | Offset 184, 28 lines modified | ||
| 176 | ··-·no_reboot_needed | 184 | ··-·no_reboot_needed |
| 177 | ··-·package_aide_installed | 185 | ··-·package_aide_installed |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 179 | [[packages]] | 187 | [[packages]] |
| 180 | name·=·"aide" | 188 | name·=·"aide" |
| 181 | version·=·"*" | 189 | version·=·"*" |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 188 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 189 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 190 | ····yum·install·-y·"aide" | ||
| 191 | fi | ||
| 195 | package·install·aide | ||
| 192 | else | ||
| 193 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 194 | fi | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 200 | package· | 201 | package·--add=aide |
| 201 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 202 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 202 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 203 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 203 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 204 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 204 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 205 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 220, 14 lines modified | Offset 220, 27 lines modified | ||
| 220 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 220 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 221 | ············_\x8i_\x8s_\x8m······1446 | 221 | ············_\x8i_\x8s_\x8m······1446 |
| 222 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 222 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 223 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 223 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 224 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 224 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 226 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 226 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 228 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 229 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 230 | fips-mode-setup·--enable | ||
| 231 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 232 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 233 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 234 | fi | ||
| 235 | else | ||
| 236 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 237 | fi | ||
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| Max diff block lines reached; 1244922/1251297 bytes (99.49%) of diff not shown. | |||
| Offset 14550, 16 lines modified | Offset 14550, 16 lines modified | ||
| 00038d50:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00038d50:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00038d60:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00038d60:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00038d70:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00038d70:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038d80:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038d80:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038d90:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038d90:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038da0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038da0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038db0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038db0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038dc0:·2020·2028·6173·206f·6620·3230·323 | 00038dc0:·2020·2028·6173·206f·6620·3230·3235·2d31·····(as·of·2025-1 | ||
| 00038dd0:·3 | 00038dd0:·322d·3131·290a·2020·2020·2020·2020·2020··2-11).·········· | ||
| 00038de0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00038de0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00038df0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00038df0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00038e00:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00038e00:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00038e10:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00038e10:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00038e20:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00038e20:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00038e30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00038e30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00038e40:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00038e40:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15429, 301 lines modified | Offset 15429, 301 lines modified | ||
| 0003c440:·7461·7267·6574·3d22·2369·646d·3736·3632··target="#idm7662 | 0003c440:·7461·7267·6574·3d22·2369·646d·3736·3632··target="#idm7662 | ||
| 0003c450:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003c450:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003c460:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003c460:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003c470:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003c470:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003c480:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003c480:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003c490:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003c490:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003c4a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003c4a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003c4b0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003c4c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c4d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c4e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c4f0:·2069·643d·2269·646d·3736·3632·223e·3c70···id="idm7662"><p | |||
| 0003c500:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003c510:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003c520:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003c530:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003c540:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003c550:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003c560:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003c570:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003c580:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003c590:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003c5a0:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003c5b0:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003c5c0:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003c5d0:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003c5e0:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003c5f0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003c600:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003c610:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003c620:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003c630:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003c640:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003c650:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003c660:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003c670:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003c680:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003c690:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003c6a0:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003c6b0:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003c6c0:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003c6d0:·200a·2020·2020·7975·6d20·7265·696e·7374···.····yum·reinst | |||
| 0003c6e0:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003c6f0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003c700:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003c710:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c720:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c730:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c740:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c750:·7461·7267·6574·3d22·2369·646d·3736·3633··target="#idm7663 | |||
| 0003c760:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c770:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c780:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c790:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c7a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c7b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c | 0003c7c0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003c | 0003c7d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003c | 0003c7e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003c | 0003c7f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003c | 0003c800:·7365·2220·6964·3d22·6964·6d37·3636·3322··se"·id="idm7663" | ||
| 0003c | 0003c810:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003c | 0003c820:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003c | 0003c830:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003c | 0003c840:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003c | 0003c850:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003c | 0003c860:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003c | 0003c870:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003c | 0003c880:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003c | 0003c890:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003c | 0003c8a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c | 0003c8b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003c | 0003c8c0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003c | 0003c8d0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003c | 0003c8e0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003c | 0003c8f0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003c | 0003c900:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003c | 0003c910:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003c | 0003c920:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003c | 0003c930:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003c | 0003c940:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003c | 0003c950:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003c | 0003c960:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003c | 0003c970:·6d64·3a20·7975·6d20·7265·696e·7374·616c··md:·yum·reinstal | ||
| 0003c | 0003c980:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003c | 0003c990:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003c | 0003c9a0:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003c | 0003c9b0:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003c | 0003c9c0:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003c | 0003c9d0:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003c | 0003c9e0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003c | 0003c9f0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003c | 0003ca00:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003c | 0003ca10:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003c | 0003ca20:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003c | 0003ca30:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003c | 0003ca40:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003c | 0003ca50:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c | 0003ca60:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003c | 0003ca70:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003c | 0003ca80:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003c | 0003ca90:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c | 0003caa0:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003c | 0003cab0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003c | 0003cac0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003c | 0003cad0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003c | 0003cae0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003c | 0003caf0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003c | 0003cb00:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003c | 0003cb10:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| Max diff block lines reached; 17129483/17155343 bytes (99.85%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 138, 14 lines modified | Offset 138, 27 lines modified | ||
| 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 147 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 148 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 149 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 150 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 151 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 152 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 150 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 158 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 151 | ··set_fact: | 159 | ··set_fact: |
| Offset 272, 27 lines modified | Offset 285, 14 lines modified | ||
| 272 | ··-·PCI-DSSv4-11.5.2 | 285 | ··-·PCI-DSSv4-11.5.2 |
| 273 | ··-·high_complexity | 286 | ··-·high_complexity |
| 274 | ··-·high_severity | 287 | ··-·high_severity |
| 275 | ··-·medium_disruption | 288 | ··-·medium_disruption |
| 276 | ··-·no_reboot_needed | 289 | ··-·no_reboot_needed |
| 277 | ··-·restrict_strategy | 290 | ··-·restrict_strategy |
| 278 | ··-·rpm_verify_hashes | 291 | ··-·rpm_verify_hashes |
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 280 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 281 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 282 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 283 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 284 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 285 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 286 | fi | ||
| 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 292 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 288 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 293 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 289 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 294 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 290 | run·the·following·command·to·determine·which·package·owns·it: | 295 | run·the·following·command·to·determine·which·package·owns·it: |
| 291 | $·rpm·-qf·FILENAME | 296 | $·rpm·-qf·FILENAME |
| 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 297 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 293 | $·sudo·rpm·--setugids·PACKAGENAME | 298 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 311, 14 lines modified | Offset 311, 40 lines modified | ||
| 311 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 311 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 312 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 312 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 313 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 313 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 314 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 314 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 315 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 315 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 316 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 316 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 317 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 317 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 319 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 320 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 321 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 322 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 323 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 324 | declare·-A·SETPERMS_RPM_DICT | ||
| 325 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 326 | #·is·expected·by·the·RPM·database | ||
| 327 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 328 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 329 | do | ||
| 330 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 331 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 332 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 333 | done | ||
| 334 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 335 | #·correct·values | ||
| 336 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 337 | do | ||
| 338 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 339 | done | ||
| 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 319 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 320 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 321 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 322 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 323 | -·name:·Read·list·of·files·with·incorrect·ownership | 345 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 324 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 346 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 393, 40 lines modified | Offset 419, 14 lines modified | ||
| 393 | ··-·PCI-DSSv4-11.5.2 | 419 | ··-·PCI-DSSv4-11.5.2 |
| 394 | ··-·high_complexity | 420 | ··-·high_complexity |
| 395 | ··-·high_severity | 421 | ··-·high_severity |
| 396 | ··-·medium_disruption | 422 | ··-·medium_disruption |
| 397 | ··-·no_reboot_needed | 423 | ··-·no_reboot_needed |
| 398 | ··-·restrict_strategy | 424 | ··-·restrict_strategy |
| 399 | ··-·rpm_verify_ownership | 425 | ··-·rpm_verify_ownership |
| 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 401 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 402 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 403 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 404 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 405 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1654377/1661989 bytes (99.54%) of diff not shown. | |||
| Offset 14560, 15 lines modified | Offset 14560, 15 lines modified | ||
| 00038df0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038df0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038e00:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038e00:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038e10:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038e10:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038e20:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038e20:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038e30:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038e30:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038e40:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038e40:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038e50:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038e50:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00038e60:·3032·3 | 00038e60:·3032·352d·3132·2d31·3129·0a20·2020·2020··025-12-11).····· | ||
| 00038e70:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00038e70:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00038e80:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00038e80:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00038e90:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00038e90:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00038ea0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00038ea0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00038eb0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00038eb0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038ec0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038ec0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038ed0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038ed0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15358, 235 lines modified | Offset 15358, 235 lines modified | ||
| 0003bfd0:·6574·3d22·2369·646d·3830·3032·2220·7461··et="#idm8002"·ta | 0003bfd0:·6574·3d22·2369·646d·3830·3032·2220·7461··et="#idm8002"·ta | ||
| 0003bfe0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003bfe0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003bff0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003bff0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c000:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003c000:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c010:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003c010:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c020:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003c020:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003c030:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003c030:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c040:· | 0003c040:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | ||
| 0003c050:· | 0003c050:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003c060:· | 0003c060:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003c070:·6 | 0003c070:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003c080:· | 0003c080:·643d·2269·646d·3830·3032·223e·3c74·6162··d="idm8002"><tab | ||
| 0003c090:·6 | 0003c090:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003c0a0:· | 0003c0a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003c0b0:· | 0003c0b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003c0c0:·6 | 0003c0c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003c0d0:· | 0003c0d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003c0e0:· | 0003c0e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003c0f0:· | 0003c0f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003c100:· | 0003c100:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003c110:· | 0003c110:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003c120:· | 0003c120:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003c130:· | 0003c130:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003c140:· | 0003c140:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003c150:· | 0003c150:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003c160:· | 0003c160:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003c170:· | 0003c170:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003c180:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 0003c190:·2d61·6464·3d61·6964·650a·3c2f·636f·6465··-add=aide.</code | |||
| 0003c1a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003c1b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003c1c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003c1d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003c1e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c1f0:·3830·3033·2220·7461·6269·6e64·6578·3d22··8003"·tabindex=" | |||
| 0003c200:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c210:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c220:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c230:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c240:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c250:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003c260:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c270:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c280:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c290:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c2a0:·3033·223e·3c74·6162·6c65·2063·6c61·7373··03"><table·class | |||
| 0003c2b0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c2c0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c2d0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c2e0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c2f0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c300:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c | 0003c180:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | ||
| 0003c190:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003c1a0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003c1b0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003c1c0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003c1d0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003c1e0:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003c1f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003c200:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c210:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c220:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c230:·2d74·6172·6765·743d·2223·6964·6d38·3030··-target="#idm800 | |||
| 0003c240:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003c250:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c260:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c270:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c280:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c290:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003c2a0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003c2b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c2c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c2d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c2e0:·2220·6964·3d22·6964·6d38·3030·3322·3e3c··"·id="idm8003">< | |||
| 0003c2f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c300:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c310:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c320:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c330:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c3 | 0003c340:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003c3 | 0003c350:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c340:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c350:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c360:· | 0003c360:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003c370:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c380:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c3 | 0003c390:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003c380:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003c390:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003c3a0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003c3b0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003c3c0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003c3d0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003c3e0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003c3 | 0003c3a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c3b0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c3c0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c3d0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c3e0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003c3f0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003c400:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003c410:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003c420:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003c430:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003c440:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0003c450:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0003c460:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 0003c470:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 0003c480:·7468·656e·0a20·2020·2079·756d·2069·6e73··then.····yum·ins | |||
| 0003c490:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| Max diff block lines reached; 28697554/28729762 bytes (99.89%) of diff not shown. | |||
| Offset 14584, 15 lines modified | Offset 14584, 15 lines modified | ||
| 00038f70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00038f70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00038f80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00038f80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038f90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038f90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038fa0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038fa0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038fb0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038fb0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038fc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038fc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00038fd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00038fd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00038fe0:·6f66·2032·3032·3 | 00038fe0:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 00038ff0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00038ff0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00039000:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00039000:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00039010:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00039010:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00039020:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00039020:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00039030:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00039030:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00039040:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00039040:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00039050:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00039050:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15377, 235 lines modified | Offset 15377, 235 lines modified | ||
| 0003c100:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | 0003c100:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | ||
| 0003c110:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003c110:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c120:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003c120:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c130:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003c130:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c140:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003c140:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c150:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003c150:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c160:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003c160:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c170:·20 | 0003c170:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | ||
| 0003c180:· | 0003c180:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003c190:· | 0003c190:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003c1a0:·6 | 0003c1a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003c1b0:· | 0003c1b0:·6964·3d22·6964·6d38·3030·3222·3e3c·7461··id="idm8002"><ta | ||
| 0003c1c0:· | 0003c1c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003c1d0:· | 0003c1d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003c1e0:· | 0003c1e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003c1f0:· | 0003c1f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003c200:· | 0003c200:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003c210:· | 0003c210:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003c220:· | 0003c220:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c230:· | 0003c230:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003c240:· | 0003c240:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003c250:· | 0003c250:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003c260:· | 0003c260:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003c270:· | 0003c270:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c280:· | 0003c280:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003c290:· | 0003c290:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003c2a0:· | 0003c2a0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003c2b0:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003c2c0:·2d2d·6164·643d·6169·6465·0a3c·2f63·6f64··--add=aide.</cod | |||
| 0003c2d0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c2e0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c2f0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c300:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c310:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c320:·6d38·3030·3322·2074·6162·696e·6465·783d··m8003"·tabindex= | |||
| 0003c330:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c340:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c350:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c360:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c370:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c380:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003c390:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c3a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c3b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c3c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003c3d0:·3030·3322·3e3c·7461·626c·6520·636c·6173··003"><table·clas | |||
| 0003c3e0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c3f0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c400:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c410:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c420:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c430:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c | 0003c2b0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | ||
| 0003c2c0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003c2d0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003c2e0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003c2f0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003c300:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003c310:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003c320:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003c330:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003c340:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003c350:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003c360:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003c370:·3033·2220·7461·6269·6e64·6578·3d22·3022··03"·tabindex="0" | |||
| 0003c380:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003c390:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003c3a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003c3b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003c3c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c3d0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003c3e0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003c3f0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c400:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c410:·6522·2069·643d·2269·646d·3830·3033·223e··e"·id="idm8003"> | |||
| 0003c420:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c430:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c440:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c450:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c460:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c4 | 0003c470:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003c4 | 0003c480:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003c470:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c480:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c490:· | 0003c490:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003c4a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c4b0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003c4 | 0003c4c0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003c4b0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003c4c0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003c4d0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003c4e0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003c4f0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003c500:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003c510:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003c | 0003c4d0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003c4e0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003c4f0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003c500:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c510:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003c520:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003c530:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003c540:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003c550:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003c560:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003c570:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003c580:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003c590:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003c5a0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003c5b0:·2074·6865·6e0a·2020·2020·7975·6d20·696e···then.····yum·in | |||
| 0003c5c0:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| Max diff block lines reached; 28550434/28582642 bytes (99.89%) of diff not shown. | |||
| Offset 14435, 15 lines modified | Offset 14435, 15 lines modified | ||
| 00038620:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038620:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038630:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038630:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038640:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038640:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038650:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038650:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038660:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038660:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038670:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038670:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038680:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038680:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038690:·6620·3230·323 | 00038690:·6620·3230·3235·2d31·322d·3131·290a·2020··f·2025-12-11).·· | ||
| 000386a0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000386a0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386b0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386b0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386c0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386c0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386d0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386d0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386e0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386e0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386f0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386f0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038700:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038700:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15180, 234 lines modified | Offset 15180, 234 lines modified | ||
| 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b4c0:·646d·3732·3733·2220·7461·6269·6e64·6578··dm7273"·tabindex | 0003b4c0:·646d·3732·3733·2220·7461·6269·6e64·6578··dm7273"·tabindex | ||
| 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b520:·6d65·6469·6174·696f·6e20· | 0003b520:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003b530:· | 0003b530:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b540:· | 0003b540:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b550:· | 0003b550:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b560:· | 0003b560:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b570:· | 0003b570:·3732·3733·223e·3c74·6162·6c65·2063·6c61··7273"><table·cla | ||
| 0003b580:· | 0003b580:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b590:· | 0003b590:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b5a0:· | 0003b5a0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b5b0:·6 | 0003b5b0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b5c0:· | 0003b5c0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b5d0:· | 0003b5d0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b5e0:· | 0003b5e0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b5f0:· | 0003b5f0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b600:· | 0003b600:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b610:· | 0003b610:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b620:· | 0003b620:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b630:· | 0003b630:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b640:· | 0003b640:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003b650:·6 | 0003b650:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003b660:·6 | 0003b660:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | ||
| 0003b670:· | 0003b670:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | ||
| 0003b680:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b690:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b6a0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b6b0:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b6c0:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b6d0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b6e0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b6f0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b700:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b710:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b720:·743d·2223·6964·6d37·3237·3422·2074·6162··t="#idm7274"·tab | |||
| 0003b730:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b740:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b750:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b760:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b770:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b780:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003b790:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003b7a0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b7b0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b7c0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b7d0:·6964·6d37·3237·3422·3e3c·7461·626c·6520··idm7274"><table· | |||
| 0003b7e0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b7f0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b800:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b810:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b820:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b830:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b840:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b850:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b860:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b870:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b880:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b890:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b8a0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b8b0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b8c0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b8d0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003b8e0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003b8f0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003b900:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003b910:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003b920:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003b930:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003b940:·656e·7620·5d3b·2074·6865·6e0a·0a69·6620··env·];·then..if· | |||
| 0003b950:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 0003b960:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 0003b970:·2020·2064·6e66·2069·6e73·7461·6c6c·202d·····dnf·install·- | |||
| 0003b980:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 0003b990:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003b9a0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003b9b0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003b9c0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003b9d0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003b9e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b9f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ba00:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ba10:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ba20:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003ba30:·6d37·3237·3522·2074·6162·696e·6465·783d··m7275"·tabindex= | |||
| 0003ba40:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003ba50:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003ba60:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003ba70:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003ba80:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003ba90:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003baa0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bab0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bac0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bad0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bae0:·3732·3735·223e·3c74·6162·6c65·2063·6c61··7275"><table·cla | |||
| 0003baf0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003bb00:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003bb10:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003bb20:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bb30:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003bb40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bb50:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003bb60:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003bb70:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bb80:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bb90:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| Max diff block lines reached; 20554441/20586511 bytes (99.84%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038610:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038620:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038620:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038630:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038630:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038640:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038640:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038650:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038650:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038660:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038660:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038670:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038670:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038680:·6620·3230·323 | 00038680:·6620·3230·3235·2d31·322d·3131·290a·2020··f·2025-12-11).·· | ||
| 00038690:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038690:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386a0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386a0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386b0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386b0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386c0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386c0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386d0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386d0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386e0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386e0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386f0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386f0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15185, 234 lines modified | Offset 15185, 234 lines modified | ||
| 0003b500:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b500:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b510:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | 0003b510:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | ||
| 0003b520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b570:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b570:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | ||
| 0003b580:· | 0003b580:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | ||
| 0003b590:· | 0003b590:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b5a0:· | 0003b5a0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b5b0:· | 0003b5b0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b5c0:· | 0003b5c0:·6964·6d37·3237·3322·3e3c·7461·626c·6520··idm7273"><table· | ||
| 0003b5d0:·6 | 0003b5d0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b5e0:·6 | 0003b5e0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b5f0:· | 0003b5f0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b600:·6 | 0003b600:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b610:· | 0003b610:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b620:· | 0003b620:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b630:· | 0003b630:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b640:·7 | 0003b640:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b650:·6 | 0003b650:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b660:· | 0003b660:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b670:· | 0003b670:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b680:· | 0003b680:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b690:·7 | 0003b690:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b6a0:·6 | 0003b6a0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b6b0:· | 0003b6b0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b6c0:·6465·3e0a·7061·636b·6167·6520·2d2d·6164··de>.package·--ad | |||
| 0003b6 | 0003b6c0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | ||
| 0003b6d0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b6e0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b6f0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b700:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b710:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b720:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b730:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b740:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b750:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b760:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b770:·7267·6574·3d22·2369·646d·3732·3734·2220··rget="#idm7274"· | |||
| 0003b780:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b790:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b7a0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b7b0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b7c0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b7d0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b7e0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b7f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b800:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b810:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b820:·643d·2269·646d·3732·3734·223e·3c74·6162··d="idm7274"><tab | |||
| 0003b830:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b840:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b850:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b860:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b870:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b880:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b890:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b8a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b8b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b8c0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b8d0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b8e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b8f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b900:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b910:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b920:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0003b930:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b940:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b950:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0003b960:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0003b970:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0003b980:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0003b990:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0003b9a0:·6966·2021·2072·706d·202d·7120·2d2d·7175··if·!·rpm·-q·--qu | |||
| 0003b9b0:·6965·7420·2261·6964·6522·203b·2074·6865··iet·"aide"·;·the | |||
| 0003b9c0:·6e0a·2020·2020·646e·6620·696e·7374·616c··n.····dnf·instal | |||
| 0003b9d0:·6c20·2d79·2022·6169·6465·220a·6669·0a0a··l·-y·"aide".fi.. | |||
| 0003b9e0:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003b9f0:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003ba00:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003ba10:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003ba20:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003ba30:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003ba40:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003ba50:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003ba60:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003ba70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003ba80:·2369·646d·3732·3735·2220·7461·6269·6e64··#idm7275"·tabind | |||
| 0003ba90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003baa0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003bab0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003bac0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003bad0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bae0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003baf0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003bb00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bb10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bb20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bb30:·6964·6d37·3237·3522·3e3c·7461·626c·6520··idm7275"><table· | |||
| 0003bb40:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bb50:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bb60:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bb70:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bb80:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bb90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bba0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003bbb0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bbc0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bbd0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| Max diff block lines reached; 20969785/21001855 bytes (99.85%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038630:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038640:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038640:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038650:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038650:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038660:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038660:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038670:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038670:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038680:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038680:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038690:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038690:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 000386a0:·6620·3230·323 | 000386a0:·6620·3230·3235·2d31·322d·3131·290a·2020··f·2025-12-11).·· | ||
| 000386b0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000386b0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386c0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386c0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386d0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386d0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386e0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386e0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386f0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386f0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038700:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038700:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038710:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038710:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15176, 233 lines modified | Offset 15176, 233 lines modified | ||
| 0003b470:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003b470:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003b480:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | 0003b480:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | ||
| 0003b490:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b490:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b4a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b4a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b4b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b4b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b4c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b4c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b4d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b4d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4e0:·6961·7469·6f6e·20 | 0003b4e0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | ||
| 0003b4f0:· | 0003b4f0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b500:· | 0003b500:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b510:·6 | 0003b510:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b520:·6 | 0003b520:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | ||
| 0003b530:·3 | 0003b530:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | ||
| 0003b540:· | 0003b540:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b550:· | 0003b550:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b560:· | 0003b560:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b570:· | 0003b570:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b580:· | 0003b580:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b590:· | 0003b590:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b5a0:· | 0003b5a0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b5b0:· | 0003b5b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b5c0:· | 0003b5c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b5d0:· | 0003b5d0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b5e0:· | 0003b5e0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b5f0:· | 0003b5f0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b600:· | 0003b600:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003b610:· | 0003b610:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b620:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b630:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b640:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b650:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b660:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b670:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b680:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b690:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b6a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b6b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b6c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b6d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b6e0:·2369·646d·3732·3734·2220·7461·6269·6e64··#idm7274"·tabind | |||
| 0003b6f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b700:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b710:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b720:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b730:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b740:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b750:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b760:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b770:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b780:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b790:·3732·3734·223e·3c74·6162·6c65·2063·6c61··7274"><table·cla | |||
| 0003b7a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b7b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b7c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b7d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b7e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b7f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b800:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b810:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b820:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b830:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b840:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b850:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b860:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b870:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b880:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b890:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b8a0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b8b0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b8c0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003b8d0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003b8e0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003b8f0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003b900:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003b910:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003b920:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003b930:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 0003b940:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003b950:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b960:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b970:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b980:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b990:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b9a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b9b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b9c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b9d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b9e0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b9f0:·3735·2220·7461·6269·6e64·6578·3d22·3022··75"·tabindex="0" | |||
| 0003ba00:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003ba10:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003ba20:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003ba30:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003ba40:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003ba50:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003ba60:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003ba70:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ba80:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ba90:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003baa0:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003bab0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bac0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bad0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bae0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003baf0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bb00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bb10:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003bb20:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bb30:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003bb40:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003bb50:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| Max diff block lines reached; 8955186/8987118 bytes (99.64%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 135, 33 lines modified | Offset 135, 41 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 140 | ············_\x8c_\x8i_\x8s············6.1.1 | 140 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package·--add=aide | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | include·install_aide | 147 | include·install_aide |
| 154 | class·install_aide·{ | 148 | class·install_aide·{ |
| 155 | ··package·{·'aide': | 149 | ··package·{·'aide': |
| 156 | ····ensure·=>·'installed', | 150 | ····ensure·=>·'installed', |
| 157 | ··} | 151 | ··} |
| 158 | } | 152 | } |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 160 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 161 | ····dnf·install·-y·"aide" | ||
| 162 | fi | ||
| 163 | else | ||
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 165 | fi | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | -·name:·Ensure·aide·is·installed | 171 | -·name:·Ensure·aide·is·installed |
| 165 | ··package: | 172 | ··package: |
| Offset 180, 36 lines modified | Offset 188, 28 lines modified | ||
| 180 | ··-·no_reboot_needed | 188 | ··-·no_reboot_needed |
| 181 | ··-·package_aide_installed | 189 | ··-·package_aide_installed |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | [[packages]] | 191 | [[packages]] |
| 184 | name·=·"aide" | 192 | name·=·"aide" |
| 185 | version·=·"*" | 193 | version·=·"*" |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 192 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 193 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 194 | ····dnf·install·-y·"aide" | ||
| 195 | fi | ||
| 199 | package·install·aide | ||
| 196 | else | ||
| 197 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 198 | fi | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 204 | package· | 205 | package·--add=aide |
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Run·the·following·command·to·generate·a·new·database: | 207 | Run·the·following·command·to·generate·a·new·database: |
| 207 | $·sudo·/usr/sbin/aide·--init | 208 | $·sudo·/usr/sbin/aide·--init |
| 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 209 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 210 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 210 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 211 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 211 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 212 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 233, 14 lines modified | Offset 233, 28 lines modified | ||
| 233 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 233 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 234 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 234 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 235 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 235 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 237 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 237 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 238 | ············_\x8c_\x8i_\x8s············6.1.1 | 238 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 240 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 241 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 242 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 243 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 244 | ····dnf·install·-y·"aide" | ||
| 245 | fi | ||
| 246 | /usr/sbin/aide·--init | ||
| 247 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 248 | else | ||
| 249 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 250 | fi | ||
| 240 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 241 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 252 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 242 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 253 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1033192/1038983 bytes (99.44%) of diff not shown. | |||
| Offset 14435, 15 lines modified | Offset 14435, 15 lines modified | ||
| 00038620:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038620:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038630:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038630:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038640:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038640:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038650:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038650:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038660:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038660:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038670:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038670:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038680:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038680:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038690:·323 | 00038690:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 000386a0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386a0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386b0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386b0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386c0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386c0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386d0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386d0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386e0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386e0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000386f0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000386f0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038700:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038700:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 14854, 216 lines modified | Offset 14854, 216 lines modified | ||
| 0003a050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003a050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003a060:·3d22·2369·646d·3130·3632·3222·2074·6162··="#idm10622"·tab | 0003a060:·3d22·2369·646d·3130·3632·3222·2074·6162··="#idm10622"·tab | ||
| 0003a070:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003a070:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003a080:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003a080:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003a090:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003a090:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003a0a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003a0a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003a0b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003a0b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003a0c0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003a0c0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | ||
| 0003a0d0:· | 0003a0d0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | ||
| 0003a0e0:· | 0003a0e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003a0f0:·6 | 0003a0f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003a100:· | 0003a100:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003a110:· | 0003a110:·3d22·6964·6d31·3036·3232·223e·3c74·6162··="idm10622"><tab | ||
| 0003a120:·6 | 0003a120:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003a130:· | 0003a130:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003a140:· | 0003a140:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003a150:·6 | 0003a150:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003a160:· | 0003a160:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003a170:· | 0003a170:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003a180:· | 0003a180:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003a190:· | 0003a190:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003a1a0:· | 0003a1a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003a1b0:· | 0003a1b0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003a1c0:· | 0003a1c0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003a1d0:· | 0003a1d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003a1e0:· | 0003a1e0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003a1f0:· | 0003a1f0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003a200:· | 0003a200:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003a210:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003a210:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 0003a220:·2d61·6464·3d64·6e66·2d61·7574·6f6d·6174··-add=dnf-automat | |||
| 0003a230:·6963·0a3c·2f63·6f64·653e·3c2f·7072·653e··ic.</code></pre> | |||
| 0003a240:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003a250:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003a260:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003a270:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003a280:·6765·743d·2223·6964·6d31·3036·3233·2220··get="#idm10623"· | |||
| 0003a290:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003a2a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003a2b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003a2c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003a2d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003a2e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003a2f0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003a300:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a310:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a320:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a330:·2069·643d·2269·646d·3130·3632·3322·3e3c···id="idm10623">< | |||
| 0003a340:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003a350:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003a360:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003a370:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003a380:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003a390:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003a3a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a3b0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003a3c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a3d0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003a3e0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003a3f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a400:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003a410:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003a420:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003a430:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003a440:·6e73·7461·6c6c·5f64·6e66·2d61·7574·6f6d··nstall_dnf-autom | |||
| 0003a450:·6174·6963·0a0a·636c·6173·7320·696e·7374··atic..class·inst | |||
| 0003a | 0003a220:·616c·6c5f·646e·662d·6175·746f·6d61·7469··all_dnf-automati | ||
| 0003a | 0003a230:·630a·0a63·6c61·7373·2069·6e73·7461·6c6c··c..class·install | ||
| 0003a | 0003a240:·5f64·6e66·2d61·7574·6f6d·6174·6963·207b··_dnf-automatic·{ | ||
| 0003a250:·0a20·2070·6163·6b61·6765·207b·2027·646e··.··package·{·'dn | |||
| 0003a490:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003a4a0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003a4b0:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003a4c0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003a4d0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003a4e0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003a4f0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003a500:·6172·6765·743d·2223·6964·6d31·3036·3234··arget="#idm10624 | |||
| 0003a510:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003a520:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003a530:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003a540:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003a550:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003a560:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003a570:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003a580:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003a590:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003a5a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003a5b0:·7365·2220·6964·3d22·6964·6d31·3036·3234··se"·id="idm10624 | |||
| 0003a5c0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003a5d0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003a5e0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003a5f0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003a600:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003a610:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003a620:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003a630:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003a640:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003a650:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003a660:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003a670:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003a680:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003a690:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003a6a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003a6b0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003a6c0:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 0003a6d0:·6f6d·6174·6963·2069·7320·696e·7374·616c··omatic·is·instal | |||
| 0003a6e0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003a6f0:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 0003a700:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 0003a710:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| Max diff block lines reached; 2930848/2960434 bytes (99.00%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 76 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 77 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 77 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 78 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 101, 33 lines modified | Offset 101, 35 lines modified | ||
| 101 | $·sudo·dnf·install·dnf-automatic | 101 | $·sudo·dnf·install·dnf-automatic |
| 102 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 102 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 103 | ············suitable·for·automatic,·regular·execution. | 103 | ············suitable·for·automatic,·regular·execution. |
| 104 | Severity: ··medium | 104 | Severity: ··medium |
| 105 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 105 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | package·--add=dnf-automatic | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 119 | include·install_dnf-automatic | 113 | include·install_dnf-automatic |
| 120 | class·install_dnf-automatic·{ | 114 | class·install_dnf-automatic·{ |
| 121 | ··package·{·'dnf-automatic': | 115 | ··package·{·'dnf-automatic': |
| 122 | ····ensure·=>·'installed', | 116 | ····ensure·=>·'installed', |
| 123 | ··} | 117 | ··} |
| 124 | } | 118 | } |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 125 | ····dnf·install·-y·"dnf-automatic" | ||
| 126 | fi | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·dnf-automatic·is·installed | 132 | -·name:·Ensure·dnf-automatic·is·installed |
| 131 | ··package: | 133 | ··package: |
| Offset 141, 30 lines modified | Offset 143, 28 lines modified | ||
| 141 | ··-·no_reboot_needed | 143 | ··-·no_reboot_needed |
| 142 | ··-·package_dnf-automatic_installed | 144 | ··-·package_dnf-automatic_installed |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | [[packages]] | 146 | [[packages]] |
| 145 | name·=·"dnf-automatic" | 147 | name·=·"dnf-automatic" |
| 146 | version·=·"*" | 148 | version·=·"*" |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | package·install·dnf-automatic | ||
| 152 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 153 | ····dnf·install·-y·"dnf-automatic" | ||
| 154 | fi | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | package· | 160 | package·--add=dnf-automatic |
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 162 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 163 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 163 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 164 | automatic.conf. | 164 | automatic.conf. |
| 165 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 165 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 166 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 166 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 167 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 167 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 174, 36 lines modified | Offset 174, 14 lines modified | ||
| 174 | Severity: ··medium | 174 | Severity: ··medium |
| 175 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 175 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 176 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 176 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 177 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 177 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 178 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 178 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 179 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 179 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 180 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 180 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 186 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 187 | ··ini_file: | ||
| 188 | ····dest:·/etc/dnf/automatic.conf | ||
| 189 | ····section:·commands | ||
| 190 | ····option:·apply_updates | ||
| 191 | ····value:·'yes' | ||
| 192 | ····create:·true | ||
| 193 | ··tags: | ||
| 194 | ··-·NIST-800-53-CM-6(a) | ||
| 195 | ··-·NIST-800-53-SI-2(5) | ||
| 196 | ··-·NIST-800-53-SI-2(c) | ||
| 197 | ··-·dnf-automatic_apply_updates | ||
| 198 | ··-·low_complexity | ||
| 199 | ··-·medium_disruption | ||
| 200 | ··-·medium_severity | ||
| 201 | ··-·no_reboot_needed | ||
| 202 | ··-·unknown_strategy | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 204 | found=false | 182 | found=false |
| 205 | #·set·value·in·all·files·if·they·contain·section·or·key | 183 | #·set·value·in·all·files·if·they·contain·section·or·key |
| 206 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | 184 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do |
| 207 | ····if·[·!·-e·"$f"·];·then | 185 | ····if·[·!·-e·"$f"·];·then |
| Max diff block lines reached; 217503/223211 bytes (97.44%) of diff not shown. | |||
| Offset 14406, 15 lines modified | Offset 14406, 15 lines modified | ||
| 00038450:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038450:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038460:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038460:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038470:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038470:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038480:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038480:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038490:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038490:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 000384a0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 000384a0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 000384b0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 000384b0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 000384c0:·206f·6620·3230·323 | 000384c0:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 000384d0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000384d0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000384e0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 000384e0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 000384f0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 000384f0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038500:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038500:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038510:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038510:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038520:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038520:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038530:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038530:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15219, 233 lines modified | Offset 15219, 233 lines modified | ||
| 0003b720:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | 0003b720:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | ||
| 0003b730:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b730:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b740:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b740:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b750:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b750:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b760:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b760:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b770:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b770:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b780:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b780:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b790:·20 | 0003b790:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | ||
| 0003b7a0:· | 0003b7a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b7b0:· | 0003b7b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b7c0:·6 | 0003b7c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b7d0:· | 0003b7d0:·6964·3d22·6964·6d37·3237·3322·3e3c·7461··id="idm7273"><ta | ||
| 0003b7e0:· | 0003b7e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b7f0:· | 0003b7f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b800:· | 0003b800:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b810:· | 0003b810:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b820:· | 0003b820:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b830:· | 0003b830:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b840:· | 0003b840:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b850:· | 0003b850:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003b860:· | 0003b860:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b870:· | 0003b870:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b880:· | 0003b880:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b890:· | 0003b890:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b8a0:· | 0003b8a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b8b0:· | 0003b8b0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003b8c0:· | 0003b8c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b8d0:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003b8 | 0003b8d0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | ||
| 0003b8e0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b8f0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b900:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b910:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b920:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b930:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b940:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b950:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b960:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b970:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b980:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b990:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | |||
| 0003b9a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b9b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b9c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b9d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b9e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b9f0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003ba00:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003ba10:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ba20:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ba30:·6522·2069·643d·2269·646d·3732·3734·223e··e"·id="idm7274"> | |||
| 0003ba40:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ba50:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ba60:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ba70:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ba80:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ba90:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003baa0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bab0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003bac0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bad0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003bae0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003baf0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bb00:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bb10:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003bb20:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003bb30:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003bb40:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003bb50:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003bb60:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003bb70:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003bb80:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003bb90:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003bba0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003bbb0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003bbc0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003bbd0:·2074·6865·6e0a·2020·2020·646e·6620·696e···then.····dnf·in | |||
| 0003bbe0:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003bbf0:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003bc00:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003bc10:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003bc20:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003bc30:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003bc40:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003bc50:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bc60:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bc70:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bc80:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bc90:·6574·3d22·2369·646d·3732·3735·2220·7461··et="#idm7275"·ta | |||
| 0003bca0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bcb0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bcc0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bcd0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bce0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bcf0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bd00:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003bd10:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bd20:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bd30:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bd40:·6964·3d22·6964·6d37·3237·3522·3e3c·7461··id="idm7275"><ta | |||
| 0003bd50:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003bd60:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003bd70:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003bd80:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003bd90:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003bda0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003bdb0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bdc0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003bdd0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bde0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003bdf0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| Max diff block lines reached; 23613525/23645457 bytes (99.86%) of diff not shown. | |||
| Offset 14407, 15 lines modified | Offset 14407, 15 lines modified | ||
| 00038460:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038460:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038470:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038470:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038480:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038480:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038490:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038490:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 000384a0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 000384a0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 000384b0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 000384b0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 000384c0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 000384c0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000384d0:·323 | 000384d0:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 000384e0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000384e0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000384f0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000384f0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038500:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038500:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038510:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038510:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038520:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038520:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038530:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038530:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038540:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038540:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15187, 234 lines modified | Offset 15187, 234 lines modified | ||
| 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b530:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | 0003b530:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | ||
| 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b590:·5265·6d65·6469·6174·696f·6e20· | 0003b590:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003b5a0:·6 | 0003b5a0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | ||
| 0003b5b0:· | 0003b5b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b5c0:· | 0003b5c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b5d0:· | 0003b5d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b5e0:· | 0003b5e0:·646d·3732·3733·223e·3c74·6162·6c65·2063··dm7273"><table·c | ||
| 0003b5f0:· | 0003b5f0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b600:·6 | 0003b600:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b610:·6 | 0003b610:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b620:· | 0003b620:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b630:· | 0003b630:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b640:· | 0003b640:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b650:· | 0003b650:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b660:·7 | 0003b660:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b670:· | 0003b670:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b680:· | 0003b680:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b690:· | 0003b690:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b6a0:· | 0003b6a0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b6b0:·6 | 0003b6b0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b6c0:·6 | 0003b6c0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b6d0:· | 0003b6d0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b6e0:·6 | 0003b6e0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | ||
| 0003b6f0:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b700:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b710:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b720:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b730:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b740:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b750:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b760:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b770:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b780:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b790:·6765·743d·2223·6964·6d37·3237·3422·2074··get="#idm7274"·t | |||
| 0003b7a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b7b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b7c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b7d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b7e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b7f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b800:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b810:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b820:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b830:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b840:·3d22·6964·6d37·3237·3422·3e3c·7461·626c··="idm7274"><tabl | |||
| 0003b850:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b860:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b870:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b880:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b890:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b8a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b8b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b8c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b8d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b8e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b8f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b900:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b910:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b920:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b930:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b940:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003b950:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003b960:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003b970:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003b980:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003b990:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003b9a0:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003b9b0:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003b9c0:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003b9d0:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003b9e0:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| 0003b9f0:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003ba00:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003ba10:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003ba20:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003ba30:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003ba40:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003ba50:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ba60:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ba70:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ba80:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ba90:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003baa0:·6964·6d37·3237·3522·2074·6162·696e·6465··idm7275"·tabinde | |||
| 0003bab0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bac0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bad0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bae0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003baf0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bb00:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003bb10:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003bb20:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bb30:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bb40:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bb50:·646d·3732·3735·223e·3c74·6162·6c65·2063··dm7275"><table·c | |||
| 0003bb60:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bb70:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bb80:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bb90:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bba0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bbb0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bbc0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bbd0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bbe0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bbf0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bc00:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| Max diff block lines reached; 10424863/10456933 bytes (99.69%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Server | 58 | ··············Server |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 120, 33 lines modified | Offset 120, 41 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·--add=aide | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | include·install_aide | 132 | include·install_aide |
| 139 | class·install_aide·{ | 133 | class·install_aide·{ |
| 140 | ··package·{·'aide': | 134 | ··package·{·'aide': |
| 141 | ····ensure·=>·'installed', | 135 | ····ensure·=>·'installed', |
| 142 | ··} | 136 | ··} |
| 143 | } | 137 | } |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 144 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 145 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 146 | ····dnf·install·-y·"aide" | ||
| 147 | fi | ||
| 148 | else | ||
| 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 150 | fi | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | -·name:·Ensure·aide·is·installed | 156 | -·name:·Ensure·aide·is·installed |
| 150 | ··package: | 157 | ··package: |
| Offset 165, 36 lines modified | Offset 173, 28 lines modified | ||
| 165 | ··-·no_reboot_needed | 173 | ··-·no_reboot_needed |
| 166 | ··-·package_aide_installed | 174 | ··-·package_aide_installed |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | [[packages]] | 176 | [[packages]] |
| 169 | name·=·"aide" | 177 | name·=·"aide" |
| 170 | version·=·"*" | 178 | version·=·"*" |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 178 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 179 | ····dnf·install·-y·"aide" | ||
| 180 | fi | ||
| 184 | package·install·aide | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | package· | 190 | package·--add=aide |
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 193 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 195 | To·initiate·a·manual·check,·run·the·following·command: | 196 | To·initiate·a·manual·check,·run·the·following·command: |
| 196 | $·sudo·/usr/sbin/aide·--check | 197 | $·sudo·/usr/sbin/aide·--check |
| Offset 211, 14 lines modified | Offset 211, 28 lines modified | ||
| 211 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 211 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 212 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 212 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 214 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 214 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 215 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 215 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 216 | ············_\x8c_\x8i_\x8s············6.1.1 | 216 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 217 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 217 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 219 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 220 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 221 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 222 | ····dnf·install·-y·"aide" | ||
| 223 | fi | ||
| 224 | /usr/sbin/aide·--init | ||
| 225 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 226 | else | ||
| 227 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 228 | fi | ||
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1304781/1310628 bytes (99.55%) of diff not shown. | |||
| Offset 14408, 15 lines modified | Offset 14408, 15 lines modified | ||
| 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000384e0:·3 | 000384e0:·352d·3132·2d31·3129·0a20·2020·2020·2020··5-12-11).······· | ||
| 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15178, 234 lines modified | Offset 15178, 234 lines modified | ||
| 0003b490:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b490:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b4a0:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | 0003b4a0:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | ||
| 0003b4b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b4b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b4c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b4c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b4d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b4d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b4e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b4e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b4f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b4f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b500:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b500:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | ||
| 0003b510:· | 0003b510:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | ||
| 0003b520:· | 0003b520:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b530:· | 0003b530:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b540:· | 0003b540:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b550:· | 0003b550:·6964·6d37·3237·3322·3e3c·7461·626c·6520··idm7273"><table· | ||
| 0003b560:·6 | 0003b560:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b570:·6 | 0003b570:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b580:· | 0003b580:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b590:·6 | 0003b590:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b5a0:· | 0003b5a0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b5b0:· | 0003b5b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b5c0:· | 0003b5c0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b5d0:·7 | 0003b5d0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b5e0:·6 | 0003b5e0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b5f0:· | 0003b5f0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b600:· | 0003b600:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b610:· | 0003b610:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b620:·7 | 0003b620:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b630:·6 | 0003b630:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b640:· | 0003b640:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b650:·6465·3e0a·7061·636b·6167·6520·2d2d·6164··de>.package·--ad | |||
| 0003b6 | 0003b650:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | ||
| 0003b660:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b670:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b680:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b690:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b6a0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b6b0:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b6c0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b6d0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b6e0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b6f0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b700:·7267·6574·3d22·2369·646d·3732·3734·2220··rget="#idm7274"· | |||
| 0003b710:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b720:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b730:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b740:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b750:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b760:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b770:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b780:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b790:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b7a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b7b0:·643d·2269·646d·3732·3734·223e·3c74·6162··d="idm7274"><tab | |||
| 0003b7c0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b7d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b7e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b7f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b800:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b810:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b820:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b830:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b840:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b850:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b860:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b870:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b880:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b890:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b8a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b8b0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0003b8c0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b8d0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b8e0:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0003b8f0:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0003b900:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0003b910:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0003b920:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0003b930:·6966·2021·2072·706d·202d·7120·2d2d·7175··if·!·rpm·-q·--qu | |||
| 0003b940:·6965·7420·2261·6964·6522·203b·2074·6865··iet·"aide"·;·the | |||
| 0003b950:·6e0a·2020·2020·646e·6620·696e·7374·616c··n.····dnf·instal | |||
| 0003b960:·6c20·2d79·2022·6169·6465·220a·6669·0a0a··l·-y·"aide".fi.. | |||
| 0003b970:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003b980:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003b990:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003b9a0:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003b9b0:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003b9c0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b9d0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b9e0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b9f0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003ba00:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003ba10:·2369·646d·3732·3735·2220·7461·6269·6e64··#idm7275"·tabind | |||
| 0003ba20:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003ba30:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003ba40:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003ba50:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003ba60:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003ba70:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003ba80:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003ba90:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003baa0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bab0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bac0:·6964·6d37·3237·3522·3e3c·7461·626c·6520··idm7275"><table· | |||
| 0003bad0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bae0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003baf0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bb00:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bb10:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bb20:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bb30:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003bb40:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bb50:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bb60:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| Max diff block lines reached; 10067195/10099265 bytes (99.68%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Workstation | 58 | ··············Workstation |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 33 lines modified | Offset 118, 41 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············6.1.1 | 123 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package·--add=aide | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | include·install_aide | 130 | include·install_aide |
| 137 | class·install_aide·{ | 131 | class·install_aide·{ |
| 138 | ··package·{·'aide': | 132 | ··package·{·'aide': |
| 139 | ····ensure·=>·'installed', | 133 | ····ensure·=>·'installed', |
| 140 | ··} | 134 | ··} |
| 141 | } | 135 | } |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 142 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 143 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 144 | ····dnf·install·-y·"aide" | ||
| 145 | fi | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Ensure·aide·is·installed | 154 | -·name:·Ensure·aide·is·installed |
| 148 | ··package: | 155 | ··package: |
| Offset 163, 36 lines modified | Offset 171, 28 lines modified | ||
| 163 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 172 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | [[packages]] | 174 | [[packages]] |
| 167 | name·=·"aide" | 175 | name·=·"aide" |
| 168 | version·=·"*" | 176 | version·=·"*" |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 176 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 177 | ····dnf·install·-y·"aide" | ||
| 178 | fi | ||
| 182 | package·install·aide | ||
| 179 | else | ||
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 181 | fi | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | package· | 188 | package·--add=aide |
| 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 189 | Run·the·following·command·to·generate·a·new·database: | 190 | Run·the·following·command·to·generate·a·new·database: |
| 190 | $·sudo·/usr/sbin/aide·--init | 191 | $·sudo·/usr/sbin/aide·--init |
| 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 192 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 193 | To·initiate·a·manual·check,·run·the·following·command: | 194 | To·initiate·a·manual·check,·run·the·following·command: |
| 194 | $·sudo·/usr/sbin/aide·--check | 195 | $·sudo·/usr/sbin/aide·--check |
| Offset 209, 14 lines modified | Offset 209, 28 lines modified | ||
| 209 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 209 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 210 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 210 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 212 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 212 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 213 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ············_\x8c_\x8i_\x8s············6.1.1 | 214 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 219 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 220 | ····dnf·install·-y·"aide" | ||
| 221 | fi | ||
| 222 | /usr/sbin/aide·--init | ||
| 223 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 224 | else | ||
| 225 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 226 | fi | ||
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 217 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 218 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1261224/1267081 bytes (99.54%) of diff not shown. | |||
| Offset 14408, 15 lines modified | Offset 14408, 15 lines modified | ||
| 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000384e0:·3 | 000384e0:·352d·3132·2d31·3129·0a20·2020·2020·2020··5-12-11).······· | ||
| 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15210, 233 lines modified | Offset 15210, 233 lines modified | ||
| 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b6a0:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | 0003b6a0:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | ||
| 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b700:·6174·696f·6e20· | 0003b700:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | ||
| 0003b710:· | 0003b710:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b720:· | 0003b720:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b730:·6 | 0003b730:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b740:· | 0003b740:·7073·6522·2069·643d·2269·646d·3732·3733··pse"·id="idm7273 | ||
| 0003b750:· | 0003b750:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b760:· | 0003b760:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b770:·7 | 0003b770:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b780:·65 | 0003b780:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b790:·6 | 0003b790:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b7a0:·6 | 0003b7a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b7b0:·6 | 0003b7b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b7c0:· | 0003b7c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b7d0:· | 0003b7d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b7e0:· | 0003b7e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b7f0:· | 0003b7f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b800:·6 | 0003b800:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b810:· | 0003b810:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b820:· | 0003b820:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b830:· | 0003b830:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b840:· | 0003b840:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | ||
| 0003b850:·6 | 0003b850:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | ||
| 0003b860:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b870:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b880:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b890:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b8a0:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b8b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b8c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b8d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b8e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b8f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b900:·6964·6d37·3237·3422·2074·6162·696e·6465··idm7274"·tabinde | |||
| 0003b910:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b920:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b930:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b940:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b950:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b960:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b970:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b980:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b990:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b9a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b9b0:·3237·3422·3e3c·7461·626c·6520·636c·6173··274"><table·clas | |||
| 0003b9c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b9d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b9e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b9f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ba00:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ba10:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ba20:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003ba30:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003ba40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ba50:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003ba60:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003ba70:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003ba80:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003ba90:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003baa0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003bab0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003bac0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003bad0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003bae0:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003baf0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003bb00:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003bb10:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003bb20:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003bb30:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003bb40:·6465·2220·3b20·7468·656e·0a20·2020·2064··de"·;·then.····d | |||
| 0003bb50:·6e66·2069·6e73·7461·6c6c·202d·7920·2261··nf·install·-y·"a | |||
| 0003bb60:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003bb70:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003bb80:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003bb90:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003bba0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003bbb0:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003bbc0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bbd0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bbe0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bbf0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bc00:·2d74·6172·6765·743d·2223·6964·6d37·3237··-target="#idm727 | |||
| 0003bc10:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 0003bc20:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bc30:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bc40:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bc50:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bc60:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bc70:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003bc80:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bc90:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bca0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bcb0:·7073·6522·2069·643d·2269·646d·3732·3735··pse"·id="idm7275 | |||
| 0003bcc0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bcd0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bce0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bcf0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bd00:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bd10:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bd20:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bd30:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bd40:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bd50:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003bd60:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bd70:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| Max diff block lines reached; 23429046/23460978 bytes (99.86%) of diff not shown. | |||
| Offset 14419, 16 lines modified | Offset 14419, 16 lines modified | ||
| 00038520:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038520:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038530:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038530:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038540:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038540:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038550:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038550:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038560:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038560:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038570:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038570:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038590:·2020·2020·2028·6173·206f·6620·3230·323 | 00038590:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 000385a0:·2d31·3 | 000385a0:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 000385b0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 000385b0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 000385c0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 000385c0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 000385d0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 000385d0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000385e0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000385e0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000385f0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000385f0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038600:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038600:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038610:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038610:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15273, 301 lines modified | Offset 15273, 301 lines modified | ||
| 0003ba80:·7461·7267·6574·3d22·2369·646d·3639·3334··target="#idm6934 | 0003ba80:·7461·7267·6574·3d22·2369·646d·3639·3334··target="#idm6934 | ||
| 0003ba90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ba90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003baa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003baa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003bab0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003bab0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003bac0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003bac0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003bad0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003bad0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003bae0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003bae0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003baf0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003bb00:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bb10:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bb20:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bb30:·2069·643d·2269·646d·3639·3334·223e·3c70···id="idm6934"><p | |||
| 0003bb40:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003bb50:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003bb60:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003bb70:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003bb80:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003bb90:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003bba0:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003bbb0:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003bbc0:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003bbd0:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003bbe0:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003bbf0:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003bc00:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003bc10:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003bc20:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003bc30:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003bc40:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003bc50:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003bc60:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003bc70:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003bc80:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003bc90:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003bca0:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003bcb0:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003bcc0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003bcd0:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003bce0:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003bcf0:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003bd00:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003bd10:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | |||
| 0003bd20:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003bd30:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003bd40:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003bd50:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bd60:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bd70:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bd80:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bd90:·7461·7267·6574·3d22·2369·646d·3639·3335··target="#idm6935 | |||
| 0003bda0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bdb0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bdc0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bdd0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bde0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bdf0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003be00:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003b | 0003be10:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b | 0003be20:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003be30:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003be40:·7365·2220·6964·3d22·6964·6d36·3933·3522··se"·id="idm6935" | ||
| 0003b | 0003be50:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003be60:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003be70:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003be80:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003be90:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003bea0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003b | 0003beb0:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003b | 0003bec0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003bed0:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003b | 0003bee0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bef0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003bf00:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003bf10:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003bf20:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b | 0003bf30:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b | 0003bf40:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b | 0003bf50:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003b | 0003bf60:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003b | 0003bf70:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003b | 0003bf80:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003b | 0003bf90:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003b | 0003bfa0:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003b | 0003bfb0:·6d64·3a20·646e·6620·7265·696e·7374·616c··md:·dnf·reinstal | ||
| 0003b | 0003bfc0:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003b | 0003bfd0:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003b | 0003bfe0:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003b | 0003bff0:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003 | 0003c000:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003 | 0003c010:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003 | 0003c020:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003 | 0003c030:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003 | 0003c040:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003 | 0003c050:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003 | 0003c060:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003 | 0003c070:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003 | 0003c080:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003 | 0003c090:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003 | 0003c0a0:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003 | 0003c0b0:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003 | 0003c0c0:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003 | 0003c0d0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003 | 0003c0e0:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003 | 0003c0f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003 | 0003c100:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003 | 0003c110:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003 | 0003c120:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003 | 0003c130:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003 | 0003c140:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003 | 0003c150:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| Max diff block lines reached; 6243277/6269137 bytes (99.59%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:10 | 63 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 64 | ····*·cpe:/o:centos:centos:10 | 64 | ····*·cpe:/o:centos:centos:10 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 14 lines modified | Offset 122, 27 lines modified | ||
| 122 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 122 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 123 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 123 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 124 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 124 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 125 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 125 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 127 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 131 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 132 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 133 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 134 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 135 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 136 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 134 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 142 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 135 | ··set_fact: | 143 | ··set_fact: |
| Offset 256, 27 lines modified | Offset 269, 14 lines modified | ||
| 256 | ··-·PCI-DSSv4-11.5.2 | 269 | ··-·PCI-DSSv4-11.5.2 |
| 257 | ··-·high_complexity | 270 | ··-·high_complexity |
| 258 | ··-·high_severity | 271 | ··-·high_severity |
| 259 | ··-·medium_disruption | 272 | ··-·medium_disruption |
| 260 | ··-·no_reboot_needed | 273 | ··-·no_reboot_needed |
| 261 | ··-·restrict_strategy | 274 | ··-·restrict_strategy |
| 262 | ··-·rpm_verify_hashes | 275 | ··-·rpm_verify_hashes |
| 263 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 264 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 265 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 266 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 267 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 268 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 269 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 270 | fi | ||
| 271 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 276 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 272 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 277 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 273 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 278 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 274 | run·the·following·command·to·determine·which·package·owns·it: | 279 | run·the·following·command·to·determine·which·package·owns·it: |
| 275 | $·rpm·-qf·FILENAME | 280 | $·rpm·-qf·FILENAME |
| 276 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 281 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 277 | $·sudo·rpm·--setugids·PACKAGENAME | 282 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 295, 14 lines modified | Offset 295, 40 lines modified | ||
| 295 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 295 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 296 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 296 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 297 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 297 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 298 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 298 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 299 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 299 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 300 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 300 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 301 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 301 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 307 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 308 | declare·-A·SETPERMS_RPM_DICT | ||
| 309 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 310 | #·is·expected·by·the·RPM·database | ||
| 311 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 312 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 313 | do | ||
| 314 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 315 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 316 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 317 | done | ||
| 318 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 319 | #·correct·values | ||
| 320 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 321 | do | ||
| 322 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 323 | done | ||
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 325 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 326 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 327 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 328 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 307 | -·name:·Read·list·of·files·with·incorrect·ownership | 329 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 308 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 330 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 377, 40 lines modified | Offset 403, 14 lines modified | ||
| 377 | ··-·PCI-DSSv4-11.5.2 | 403 | ··-·PCI-DSSv4-11.5.2 |
| 378 | ··-·high_complexity | 404 | ··-·high_complexity |
| 379 | ··-·high_severity | 405 | ··-·high_severity |
| 380 | ··-·medium_disruption | 406 | ··-·medium_disruption |
| 381 | ··-·no_reboot_needed | 407 | ··-·no_reboot_needed |
| 382 | ··-·restrict_strategy | 408 | ··-·restrict_strategy |
| 383 | ··-·rpm_verify_ownership | 409 | ··-·rpm_verify_ownership |
| 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 385 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 386 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 387 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 388 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 389 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 673630/681344 bytes (98.87%) of diff not shown. | |||
| Offset 14439, 15 lines modified | Offset 14439, 15 lines modified | ||
| 00038660:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038660:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038670:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038670:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038680:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038680:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038690:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038690:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000386a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000386a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000386b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000386b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000386c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000386c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000386d0:·7320·6f66·2032·3032·3 | 000386d0:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 000386e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000386e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000386f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000386f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038700:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038700:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038710:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038710:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038720:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038720:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038730:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038730:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038740:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038740:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15294, 300 lines modified | Offset 15294, 300 lines modified | ||
| 0003bbd0:·6765·743d·2223·6964·6d36·3933·3422·2074··get="#idm6934"·t | 0003bbd0:·6765·743d·2223·6964·6d36·3933·3422·2074··get="#idm6934"·t | ||
| 0003bbe0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bbe0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bbf0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003bbf0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bc00:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003bc00:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bc10:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003bc10:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bc20:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003bc20:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003bc30:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003bc30:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bc40:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003bc50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bc60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bc70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bc80:·3d22·6964·6d36·3933·3422·3e3c·7072·653e··="idm6934"><pre> | |||
| 0003bc90:·3c63·6f64·653e·0a23·2046·696e·6420·7768··<code>.#·Find·wh | |||
| 0003bca0:·6963·6820·6669·6c65·7320·6861·7665·2069··ich·files·have·i | |||
| 0003bcb0:·6e63·6f72·7265·6374·2068·6173·6820·286e··ncorrect·hash·(n | |||
| 0003bcc0:·6f74·2069·6e20·2f65·7463·2c20·6265·6361··ot·in·/etc,·beca | |||
| 0003bcd0:·7573·6520·6f66·2074·6865·2073·7973·7465··use·of·the·syste | |||
| 0003bce0:·6d20·7265·6c61·7465·6420·636f·6e66·6967··m·related·config | |||
| 0003bcf0:·2066·696c·6573·2920·616e·6420·7468·656e···files)·and·then | |||
| 0003bd00:·2067·6574·2066·696c·6573·206e·616d·6573···get·files·names | |||
| 0003bd10:·0a66·696c·6573·5f77·6974·685f·696e·636f··.files_with_inco | |||
| 0003bd20:·7272·6563·745f·6861·7368·3d22·2428·7270··rrect_hash="$(rp | |||
| 0003bd30:·6d20·2d56·6120·2d2d·6e6f·636f·6e66·6967··m·-Va·--noconfig | |||
| 0003bd40:·207c·2067·7265·7020·2d45·2027·5e2e·2e35···|·grep·-E·'^..5 | |||
| 0003bd50:·2720·7c20·6177·6b20·277b·7072·696e·7420··'·|·awk·'{print· | |||
| 0003bd60:·244e·467d·2720·2922·0a0a·6966·205b·202d··$NF}'·)"..if·[·- | |||
| 0003bd70:·6e20·2224·6669·6c65·735f·7769·7468·5f69··n·"$files_with_i | |||
| 0003bd80:·6e63·6f72·7265·6374·5f68·6173·6822·205d··ncorrect_hash"·] | |||
| 0003bd90:·3b20·7468·656e·0a20·2020·2023·2046·726f··;·then.····#·Fro | |||
| 0003bda0:·6d20·6669·6c65·7320·6e61·6d65·7320·6765··m·files·names·ge | |||
| 0003bdb0:·7420·7061·636b·6167·6520·6e61·6d65·7320··t·package·names· | |||
| 0003bdc0:·616e·6420·6368·616e·6765·206e·6577·6c69··and·change·newli | |||
| 0003bdd0:·6e65·2074·6f20·7370·6163·652c·2062·6563··ne·to·space,·bec | |||
| 0003bde0:·6175·7365·2072·706d·2077·7269·7465·7320··ause·rpm·writes· | |||
| 0003bdf0:·6561·6368·2070·6163·6b61·6765·2074·6f20··each·package·to· | |||
| 0003be00:·6e65·7720·6c69·6e65·0a20·2020·2070·6163··new·line.····pac | |||
| 0003be10:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003be20:·6c6c·3d22·2428·7270·6d20·2d71·6620·2466··ll="$(rpm·-qf·$f | |||
| 0003be30:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003be40:·6563·745f·6861·7368·207c·2074·7220·275c··ect_hash·|·tr·'\ | |||
| 0003be50:·6e27·2027·2027·2922·0a0a·2020·2020·0a20··n'·'·')"..····.· | |||
| 0003be60:·2020·2064·6e66·2072·6569·6e73·7461·6c6c·····dnf·reinstall | |||
| 0003be70:·202d·7920·2470·6163·6b61·6765·735f·746f···-y·$packages_to | |||
| 0003be80:·5f72·6569·6e73·7461·6c6c·0a20·2020·200a··_reinstall.····. | |||
| 0003be90:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003bea0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003beb0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bec0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bed0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bee0:·6765·743d·2223·6964·6d36·3933·3522·2074··get="#idm6935"·t | |||
| 0003bef0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bf00:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bf10:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bf20:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bf30:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bf40:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b | 0003bf50:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b | 0003bf60:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003bf70:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003bf80:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003bf90:·2069·643d·2269·646d·3639·3335·223e·3c74···id="idm6935"><t | ||
| 0003b | 0003bfa0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003bfb0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003bfc0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003bfd0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003bfe0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b | 0003bff0:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003 | 0003c000:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003c010:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003 | 0003c020:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003 | 0003c030:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003 | 0003c040:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003 | 0003c050:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003 | 0003c060:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003 | 0003c070:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003 | 0003c080:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003 | 0003c090:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003 | 0003c0a0:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | ||
| 0003 | 0003c0b0:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | ||
| 0003 | 0003c0c0:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | ||
| 0003 | 0003c0d0:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003 | 0003c0e0:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003 | 0003c0f0:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003 | 0003c100:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003 | 0003c110:·790a·2020·7768·656e·3a20·616e·7369·626c··y.··when:·ansibl | ||
| 0003 | 0003c120:·655f·6469·7374·7269·6275·7469·6f6e·2069··e_distribution·i | ||
| 0003 | 0003c130:·6e20·5b20·2246·6564·6f72·6122·2c20·2252··n·[·"Fedora",·"R | ||
| 0003 | 0003c140:·6564·4861·7422·2c20·2243·656e·744f·5322··edHat",·"CentOS" | ||
| 0003 | 0003c150:·2c20·224f·7261·636c·654c·696e·7578·2220··,·"OracleLinux"· | ||
| 0003 | 0003c160:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | ||
| 0003 | 0003c170:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003 | 0003c180:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003 | 0003c190:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003 | 0003c1a0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003 | 0003c1b0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003 | 0003c1c0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003 | 0003c1d0:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003 | 0003c1e0:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003 | 0003c1f0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003 | 0003c200:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003 | 0003c210:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003 | 0003c220:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003 | 0003c230:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003 | 0003c240:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003 | 0003c250:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003 | 0003c260:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003 | 0003c270:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003 | 0003c280:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003 | 0003c290:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003 | 0003c2a0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003 | 0003c2b0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| Max diff block lines reached; 19493075/19518797 bytes (99.87%) of diff not shown. | |||
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ··············(HIPAA) | 66 | ··············(HIPAA) |
| 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 68 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 68 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 69 | ····*·cpe:/o:redhat:enterprise_linux:10 | 69 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 70 | ····*·cpe:/o:centos:centos:10 | 70 | ····*·cpe:/o:centos:centos:10 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 76 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 77 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 77 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 78 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 78 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 79 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 79 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 80 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 80 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 128, 14 lines modified | Offset 128, 27 lines modified | ||
| 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 137 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 138 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 139 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 140 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 141 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 142 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 140 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 148 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 141 | ··set_fact: | 149 | ··set_fact: |
| Offset 262, 27 lines modified | Offset 275, 14 lines modified | ||
| 262 | ··-·PCI-DSSv4-11.5.2 | 275 | ··-·PCI-DSSv4-11.5.2 |
| 263 | ··-·high_complexity | 276 | ··-·high_complexity |
| 264 | ··-·high_severity | 277 | ··-·high_severity |
| 265 | ··-·medium_disruption | 278 | ··-·medium_disruption |
| 266 | ··-·no_reboot_needed | 279 | ··-·no_reboot_needed |
| 267 | ··-·restrict_strategy | 280 | ··-·restrict_strategy |
| 268 | ··-·rpm_verify_hashes | 281 | ··-·rpm_verify_hashes |
| 269 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 270 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 271 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 272 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 273 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 274 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 275 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 276 | fi | ||
| 277 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 282 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 278 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 283 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 279 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 284 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 280 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 285 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 281 | $·rpm·-qf·FILENAME | 286 | $·rpm·-qf·FILENAME |
| 282 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 287 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 303, 14 lines modified | Offset 303, 44 lines modified | ||
| 303 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 303 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 304 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 304 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 305 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 305 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 306 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 306 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 308 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 308 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 310 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 311 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 312 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 313 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 314 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 315 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 316 | declare·-A·SETPERMS_RPM_DICT | ||
| 317 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 318 | #·is·expected·by·the·RPM·database | ||
| 319 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 320 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 321 | do | ||
| 322 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 323 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 324 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 325 | ········do | ||
| 326 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 327 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 328 | ········done | ||
| 329 | done | ||
| 330 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 331 | #·correct·values | ||
| 332 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 333 | do | ||
| 334 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 335 | done | ||
| 310 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 311 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 312 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 313 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 314 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 315 | -·name:·Read·list·of·files·with·incorrect·permissions | 341 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 316 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 342 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 388, 44 lines modified | Offset 418, 14 lines modified | ||
| 388 | ··-·PCI-DSSv4-11.5.2 | 418 | ··-·PCI-DSSv4-11.5.2 |
| 389 | ··-·high_complexity | 419 | ··-·high_complexity |
| 390 | ··-·high_severity | 420 | ··-·high_severity |
| 391 | ··-·medium_disruption | 421 | ··-·medium_disruption |
| 392 | ··-·no_reboot_needed | 422 | ··-·no_reboot_needed |
| 393 | ··-·restrict_strategy | 423 | ··-·restrict_strategy |
| 394 | ··-·rpm_verify_permissions | 424 | ··-·rpm_verify_permissions |
| 395 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 396 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 397 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1581579/1589729 bytes (99.49%) of diff not shown. | |||
| Offset 14427, 15 lines modified | Offset 14427, 15 lines modified | ||
| 000385a0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 000385a0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 000385b0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 000385b0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 000385c0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 000385c0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000385d0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000385d0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000385e0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000385e0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000385f0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000385f0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038600:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038600:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038610:·7320·6f66·2032·3032·3 | 00038610:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 00038620:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038620:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038630:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038630:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038640:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038640:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038650:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038650:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038660:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038660:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038670:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038670:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038680:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038680:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15317, 301 lines modified | Offset 15317, 301 lines modified | ||
| 0003bd40:·2d74·6172·6765·743d·2223·6964·6d36·3933··-target="#idm693 | 0003bd40:·2d74·6172·6765·743d·2223·6964·6d36·3933··-target="#idm693 | ||
| 0003bd50:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | 0003bd50:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | ||
| 0003bd60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003bd60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003bd70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003bd70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bd80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003bd80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bd90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003bd90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bda0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003bda0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bdb0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003bdc0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bdd0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bde0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bdf0:·2220·6964·3d22·6964·6d36·3933·3422·3e3c··"·id="idm6934">< | |||
| 0003be00:·7072·653e·3c63·6f64·653e·0a23·2046·696e··pre><code>.#·Fin | |||
| 0003be10:·6420·7768·6963·6820·6669·6c65·7320·6861··d·which·files·ha | |||
| 0003be20:·7665·2069·6e63·6f72·7265·6374·2068·6173··ve·incorrect·has | |||
| 0003be30:·6820·286e·6f74·2069·6e20·2f65·7463·2c20··h·(not·in·/etc,· | |||
| 0003be40:·6265·6361·7573·6520·6f66·2074·6865·2073··because·of·the·s | |||
| 0003be50:·7973·7465·6d20·7265·6c61·7465·6420·636f··ystem·related·co | |||
| 0003be60:·6e66·6967·2066·696c·6573·2920·616e·6420··nfig·files)·and· | |||
| 0003be70:·7468·656e·2067·6574·2066·696c·6573·206e··then·get·files·n | |||
| 0003be80:·616d·6573·0a66·696c·6573·5f77·6974·685f··ames.files_with_ | |||
| 0003be90:·696e·636f·7272·6563·745f·6861·7368·3d22··incorrect_hash=" | |||
| 0003bea0:·2428·7270·6d20·2d56·6120·2d2d·6e6f·636f··$(rpm·-Va·--noco | |||
| 0003beb0:·6e66·6967·207c·2067·7265·7020·2d45·2027··nfig·|·grep·-E·' | |||
| 0003bec0:·5e2e·2e35·2720·7c20·6177·6b20·277b·7072··^..5'·|·awk·'{pr | |||
| 0003bed0:·696e·7420·244e·467d·2720·2922·0a0a·6966··int·$NF}'·)"..if | |||
| 0003bee0:·205b·202d·6e20·2224·6669·6c65·735f·7769···[·-n·"$files_wi | |||
| 0003bef0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003bf00:·6822·205d·3b20·7468·656e·0a20·2020·2023··h"·];·then.····# | |||
| 0003bf10:·2046·726f·6d20·6669·6c65·7320·6e61·6d65···From·files·name | |||
| 0003bf20:·7320·6765·7420·7061·636b·6167·6520·6e61··s·get·package·na | |||
| 0003bf30:·6d65·7320·616e·6420·6368·616e·6765·206e··mes·and·change·n | |||
| 0003bf40:·6577·6c69·6e65·2074·6f20·7370·6163·652c··ewline·to·space, | |||
| 0003bf50:·2062·6563·6175·7365·2072·706d·2077·7269···because·rpm·wri | |||
| 0003bf60:·7465·7320·6561·6368·2070·6163·6b61·6765··tes·each·package | |||
| 0003bf70:·2074·6f20·6e65·7720·6c69·6e65·0a20·2020···to·new·line.··· | |||
| 0003bf80:·2070·6163·6b61·6765·735f·746f·5f72·6569···packages_to_rei | |||
| 0003bf90:·6e73·7461·6c6c·3d22·2428·7270·6d20·2d71··nstall="$(rpm·-q | |||
| 0003bfa0:·6620·2466·696c·6573·5f77·6974·685f·696e··f·$files_with_in | |||
| 0003bfb0:·636f·7272·6563·745f·6861·7368·207c·2074··correct_hash·|·t | |||
| 0003bfc0:·7220·275c·6e27·2027·2027·2922·0a0a·2020··r·'\n'·'·')"..·· | |||
| 0003bfd0:·2020·0a20·2020·2064·6e66·2072·6569·6e73····.····dnf·reins | |||
| 0003bfe0:·7461·6c6c·202d·7920·2470·6163·6b61·6765··tall·-y·$package | |||
| 0003bff0:·735f·746f·5f72·6569·6e73·7461·6c6c·0a20··s_to_reinstall.· | |||
| 0003c000:·2020·200a·6669·0a3c·2f63·6f64·653e·3c2f·····.fi.</code></ | |||
| 0003c010:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003c020:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c030:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c040:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c050:·2d74·6172·6765·743d·2223·6964·6d36·3933··-target="#idm693 | |||
| 0003c060:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 0003c070:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c080:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c090:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c0a0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c0b0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003 | 0003c0c0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003 | 0003c0d0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003 | 0003c0e0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003 | 0003c0f0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003 | 0003c100:·7073·6522·2069·643d·2269·646d·3639·3335··pse"·id="idm6935 | ||
| 0003 | 0003c110:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003 | 0003c120:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003 | 0003c130:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003 | 0003c140:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003 | 0003c150:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003 | 0003c160:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003 | 0003c170:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003 | 0003c180:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003 | 0003c190:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003 | 0003c1a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003c1b0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003 | 0003c1c0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003 | 0003c1d0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003 | 0003c1e0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003 | 0003c1f0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003 | 0003c200:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003 | 0003c210:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | ||
| 0003 | 0003c220:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | ||
| 0003 | 0003c230:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | ||
| 0003 | 0003c240:·6d61·6e64·270a·2020·7365·745f·6661·6374··mand'.··set_fact | ||
| 0003 | 0003c250:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | ||
| 0003 | 0003c260:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | ||
| 0003 | 0003c270:·636d·643a·2064·6e66·2072·6569·6e73·7461··cmd:·dnf·reinsta | ||
| 0003 | 0003c280:·6c6c·202d·790a·2020·7768·656e·3a20·616e··ll·-y.··when:·an | ||
| 0003 | 0003c290:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | ||
| 0003 | 0003c2a0:·6f6e·2069·6e20·5b20·2246·6564·6f72·6122··on·in·[·"Fedora" | ||
| 0003 | 0003c2b0:·2c20·2252·6564·4861·7422·2c20·2243·656e··,·"RedHat",·"Cen | ||
| 0003 | 0003c2c0:·744f·5322·2c20·224f·7261·636c·654c·696e··tOS",·"OracleLin | ||
| 0003 | 0003c2d0:·7578·2220·5d0a·2020·7461·6773·3a0a·2020··ux"·].··tags:.·· | ||
| 0003 | 0003c2e0:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003 | 0003c2f0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003 | 0003c300:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003c | 0003c310:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003c | 0003c320:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003c | 0003c330:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003c | 0003c340:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003c | 0003c350:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003c | 0003c360:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003c | 0003c370:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003c | 0003c380:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003c | 0003c390:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003c | 0003c3a0:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003c | 0003c3b0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003c | 0003c3c0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003c | 0003c3d0:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003c | 0003c3e0:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003c | 0003c3f0:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003c | 0003c400:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003c | 0003c410:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003c | 0003c420:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| Max diff block lines reached; 10779214/10804936 bytes (99.76%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ··············Base | 63 | ··············Base |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:10 | 66 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 67 | ····*·cpe:/o:centos:centos:10 | 67 | ····*·cpe:/o:centos:centos:10 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 132, 14 lines modified | Offset 132, 27 lines modified | ||
| 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 141 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 142 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 143 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 144 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 145 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 146 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 144 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 152 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 145 | ··set_fact: | 153 | ··set_fact: |
| Offset 266, 27 lines modified | Offset 279, 14 lines modified | ||
| 266 | ··-·PCI-DSSv4-11.5.2 | 279 | ··-·PCI-DSSv4-11.5.2 |
| 267 | ··-·high_complexity | 280 | ··-·high_complexity |
| 268 | ··-·high_severity | 281 | ··-·high_severity |
| 269 | ··-·medium_disruption | 282 | ··-·medium_disruption |
| 270 | ··-·no_reboot_needed | 283 | ··-·no_reboot_needed |
| 271 | ··-·restrict_strategy | 284 | ··-·restrict_strategy |
| 272 | ··-·rpm_verify_hashes | 285 | ··-·rpm_verify_hashes |
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 274 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 275 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 276 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 277 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 278 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 279 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 280 | fi | ||
| 281 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 286 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 282 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 287 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 283 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 288 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 284 | run·the·following·command·to·determine·which·package·owns·it: | 289 | run·the·following·command·to·determine·which·package·owns·it: |
| 285 | $·rpm·-qf·FILENAME | 290 | $·rpm·-qf·FILENAME |
| 286 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 291 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 287 | $·sudo·rpm·--setugids·PACKAGENAME | 292 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 305, 14 lines modified | Offset 305, 40 lines modified | ||
| 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 317 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 318 | declare·-A·SETPERMS_RPM_DICT | ||
| 319 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 320 | #·is·expected·by·the·RPM·database | ||
| 321 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 322 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 323 | do | ||
| 324 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 325 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 326 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 327 | done | ||
| 328 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 329 | #·correct·values | ||
| 330 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 331 | do | ||
| 332 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 333 | done | ||
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 317 | -·name:·Read·list·of·files·with·incorrect·ownership | 339 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 318 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 340 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 387, 40 lines modified | Offset 413, 14 lines modified | ||
| 387 | ··-·PCI-DSSv4-11.5.2 | 413 | ··-·PCI-DSSv4-11.5.2 |
| 388 | ··-·high_complexity | 414 | ··-·high_complexity |
| 389 | ··-·high_severity | 415 | ··-·high_severity |
| 390 | ··-·medium_disruption | 416 | ··-·medium_disruption |
| 391 | ··-·no_reboot_needed | 417 | ··-·no_reboot_needed |
| 392 | ··-·restrict_strategy | 418 | ··-·restrict_strategy |
| 393 | ··-·rpm_verify_ownership | 419 | ··-·rpm_verify_ownership |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 399 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1144555/1152185 bytes (99.34%) of diff not shown. | |||
| Offset 14431, 15 lines modified | Offset 14431, 15 lines modified | ||
| 000385e0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000385e0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 000385f0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 000385f0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038600:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038600:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038610:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038610:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038620:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038620:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038630:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038630:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038640:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038640:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038650:·206f·6620·3230·323 | 00038650:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00038660:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038660:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038670:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038670:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038680:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038680:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038690:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038690:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000386a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000386a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000386b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000386b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000386c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000386c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15321, 301 lines modified | Offset 15321, 301 lines modified | ||
| 0003bd80:·7461·7267·6574·3d22·2369·646d·3639·3334··target="#idm6934 | 0003bd80:·7461·7267·6574·3d22·2369·646d·3639·3334··target="#idm6934 | ||
| 0003bd90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003bd90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003bda0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003bda0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003bdb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003bdb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003bdc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003bdc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003bdd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003bdd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003bde0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003bde0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003bdf0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003be00:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003be10:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003be20:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003be30:·2069·643d·2269·646d·3639·3334·223e·3c70···id="idm6934"><p | |||
| 0003be40:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003be50:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003be60:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003be70:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003be80:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003be90:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003bea0:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003beb0:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003bec0:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003bed0:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003bee0:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003bef0:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003bf00:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003bf10:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003bf20:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003bf30:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003bf40:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003bf50:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003bf60:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003bf70:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003bf80:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003bf90:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003bfa0:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003bfb0:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003bfc0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003bfd0:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003bfe0:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003bff0:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003c000:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003c010:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | |||
| 0003c020:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003c030:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003c040:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003c050:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c060:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c070:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c080:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c090:·7461·7267·6574·3d22·2369·646d·3639·3335··target="#idm6935 | |||
| 0003c0a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c0b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c0c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c0d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c0e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c0f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003 | 0003c100:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003 | 0003c110:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003 | 0003c120:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003 | 0003c130:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003 | 0003c140:·7365·2220·6964·3d22·6964·6d36·3933·3522··se"·id="idm6935" | ||
| 0003 | 0003c150:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003 | 0003c160:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003 | 0003c170:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003 | 0003c180:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003 | 0003c190:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003 | 0003c1a0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003 | 0003c1b0:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003 | 0003c1c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003 | 0003c1d0:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003 | 0003c1e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 0003c1f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003 | 0003c200:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003 | 0003c210:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 0003c220:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003 | 0003c230:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003 | 0003c240:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003 | 0003c250:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003 | 0003c260:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003 | 0003c270:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003 | 0003c280:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003 | 0003c290:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003 | 0003c2a0:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003 | 0003c2b0:·6d64·3a20·646e·6620·7265·696e·7374·616c··md:·dnf·reinstal | ||
| 0003 | 0003c2c0:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003 | 0003c2d0:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003 | 0003c2e0:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003 | 0003c2f0:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003 | 0003c300:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003c | 0003c310:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003c | 0003c320:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003c | 0003c330:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003c | 0003c340:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003c | 0003c350:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003c | 0003c360:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003c | 0003c370:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003c | 0003c380:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003c | 0003c390:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c | 0003c3a0:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003c | 0003c3b0:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003c | 0003c3c0:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003c | 0003c3d0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c | 0003c3e0:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003c | 0003c3f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003c | 0003c400:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003c | 0003c410:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003c | 0003c420:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003c | 0003c430:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003c | 0003c440:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003c | 0003c450:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003c | 0003c460:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| Max diff block lines reached; 10779145/10804867 bytes (99.76%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ··············Secret | 64 | ··············Secret |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 76 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 133, 14 lines modified | Offset 133, 27 lines modified | ||
| 133 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 133 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 134 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 134 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 142 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 143 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 144 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 145 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 146 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 147 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 145 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 153 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 146 | ··set_fact: | 154 | ··set_fact: |
| Offset 267, 27 lines modified | Offset 280, 14 lines modified | ||
| 267 | ··-·PCI-DSSv4-11.5.2 | 280 | ··-·PCI-DSSv4-11.5.2 |
| 268 | ··-·high_complexity | 281 | ··-·high_complexity |
| 269 | ··-·high_severity | 282 | ··-·high_severity |
| 270 | ··-·medium_disruption | 283 | ··-·medium_disruption |
| 271 | ··-·no_reboot_needed | 284 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 285 | ··-·restrict_strategy |
| 273 | ··-·rpm_verify_hashes | 286 | ··-·rpm_verify_hashes |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 276 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 277 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 278 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 279 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 280 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 281 | fi | ||
| 282 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 283 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 288 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 284 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 289 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 285 | run·the·following·command·to·determine·which·package·owns·it: | 290 | run·the·following·command·to·determine·which·package·owns·it: |
| 286 | $·rpm·-qf·FILENAME | 291 | $·rpm·-qf·FILENAME |
| 287 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 288 | $·sudo·rpm·--setugids·PACKAGENAME | 293 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 306, 14 lines modified | Offset 306, 40 lines modified | ||
| 306 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 306 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 307 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 307 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 308 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 308 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 309 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 309 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 310 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 310 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 311 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 311 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 312 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 312 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 318 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 319 | declare·-A·SETPERMS_RPM_DICT | ||
| 320 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 321 | #·is·expected·by·the·RPM·database | ||
| 322 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 323 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 324 | do | ||
| 325 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 326 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 327 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 328 | done | ||
| 329 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 330 | #·correct·values | ||
| 331 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 332 | do | ||
| 333 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 334 | done | ||
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 336 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 337 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 338 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 339 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 318 | -·name:·Read·list·of·files·with·incorrect·ownership | 340 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 319 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 341 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 388, 40 lines modified | Offset 414, 14 lines modified | ||
| 388 | ··-·PCI-DSSv4-11.5.2 | 414 | ··-·PCI-DSSv4-11.5.2 |
| 389 | ··-·high_complexity | 415 | ··-·high_complexity |
| 390 | ··-·high_severity | 416 | ··-·high_severity |
| 391 | ··-·medium_disruption | 417 | ··-·medium_disruption |
| 392 | ··-·no_reboot_needed | 418 | ··-·no_reboot_needed |
| 393 | ··-·restrict_strategy | 419 | ··-·restrict_strategy |
| 394 | ··-·rpm_verify_ownership | 420 | ··-·rpm_verify_ownership |
| 395 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 396 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 397 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 398 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 399 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 400 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1144555/1152194 bytes (99.34%) of diff not shown. | |||
| Offset 14428, 16 lines modified | Offset 14428, 16 lines modified | ||
| 000385b0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000385b0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 000385c0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 000385c0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 000385d0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 000385d0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 000385e0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 000385e0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 000385f0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 000385f0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038600:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038600:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038610:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038610:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038620:·2020·2020·2028·6173·206f·6620·3230·323 | 00038620:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00038630:·2d31·3 | 00038630:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00038640:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038640:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038650:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038650:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038660:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038660:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038670:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038670:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038680:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038680:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038690:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038690:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000386a0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000386a0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15318, 301 lines modified | Offset 15318, 301 lines modified | ||
| 0003bd50:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bd50:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bd60:·2369·646d·3639·3334·2220·7461·6269·6e64··#idm6934"·tabind | 0003bd60:·2369·646d·3639·3334·2220·7461·6269·6e64··#idm6934"·tabind | ||
| 0003bd70:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bd70:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003bd80:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003bd80:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003bd90:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003bd90:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003bda0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003bda0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003bdb0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003bdb0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003bdc0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003bdd0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003bde0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bdf0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003be00:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003be10:·3639·3334·223e·3c70·7265·3e3c·636f·6465··6934"><pre><code | |||
| 0003be20:·3e0a·2320·4669·6e64·2077·6869·6368·2066··>.#·Find·which·f | |||
| 0003be30:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | |||
| 0003be40:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | |||
| 0003be50:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | |||
| 0003be60:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | |||
| 0003be70:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | |||
| 0003be80:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | |||
| 0003be90:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | |||
| 0003bea0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003beb0:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | |||
| 0003bec0:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | |||
| 0003bed0:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | |||
| 0003bee0:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | |||
| 0003bef0:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | |||
| 0003bf00:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003bf10:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | |||
| 0003bf20:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | |||
| 0003bf30:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | |||
| 0003bf40:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | |||
| 0003bf50:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | |||
| 0003bf60:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | |||
| 0003bf70:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | |||
| 0003bf80:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | |||
| 0003bf90:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | |||
| 0003bfa0:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | |||
| 0003bfb0:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | |||
| 0003bfc0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003bfd0:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | |||
| 0003bfe0:·2729·220a·0a20·2020·200a·2020·2020·646e··')"..····.····dn | |||
| 0003bff0:·6620·7265·696e·7374·616c·6c20·2d79·2024··f·reinstall·-y·$ | |||
| 0003c000:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003c010:·7374·616c·6c0a·2020·2020·0a66·690a·3c2f··stall.····.fi.</ | |||
| 0003c020:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c030:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c040:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c050:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c060:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c070:·2369·646d·3639·3335·2220·7461·6269·6e64··#idm6935"·tabind | |||
| 0003c080:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c090:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c0a0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c0b0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c0c0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003 | 0003c0d0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003 | 0003c0e0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003 | 0003c0f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003 | 0003c100:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003 | 0003c110:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003 | 0003c120:·6964·6d36·3933·3522·3e3c·7461·626c·6520··idm6935"><table· | ||
| 0003 | 0003c130:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003 | 0003c140:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003 | 0003c150:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003 | 0003c160:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003 | 0003c170:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003 | 0003c180:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003 | 0003c190:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003 | 0003c1a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003 | 0003c1b0:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003 | 0003c1c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003 | 0003c1d0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003 | 0003c1e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003 | 0003c1f0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003 | 0003c200:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003 | 0003c210:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003 | 0003c220:·3e3c·636f·6465·3e2d·206e·616d·653a·2027··><code>-·name:·' | ||
| 0003 | 0003c230:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| 0003 | 0003c240:·6520·6d61·6e61·6765·7220·7265·696e·7374··e·manager·reinst | ||
| 0003 | 0003c250:·616c·6c20·636f·6d6d·616e·6427·0a20·2073··all·command'.··s | ||
| 0003 | 0003c260:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003 | 0003c270:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003 | 0003c280:·6e73·7461·6c6c·5f63·6d64·3a20·646e·6620··nstall_cmd:·dnf· | ||
| 0003 | 0003c290:·7265·696e·7374·616c·6c20·2d79·0a20·2077··reinstall·-y.··w | ||
| 0003 | 0003c2a0:·6865·6e3a·2061·6e73·6962·6c65·5f64·6973··hen:·ansible_dis | ||
| 0003 | 0003c2b0:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | ||
| 0003 | 0003c2c0:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | ||
| 0003 | 0003c2d0:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | ||
| 0003 | 0003c2e0:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | ||
| 0003 | 0003c2f0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003 | 0003c300:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003c | 0003c310:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003c | 0003c320:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003c | 0003c330:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003c | 0003c340:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003c | 0003c350:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c | 0003c360:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003c | 0003c370:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003c | 0003c380:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c | 0003c390:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003c | 0003c3a0:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003c | 0003c3b0:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003c | 0003c3c0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003c | 0003c3d0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003c | 0003c3e0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003c | 0003c3f0:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003c | 0003c400:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003c | 0003c410:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003c | 0003c420:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| Max diff block lines reached; 10761893/10803347 bytes (99.62%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ··············Top·Secret | 63 | ··············Top·Secret |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:10 | 66 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 67 | ····*·cpe:/o:centos:centos:10 | 67 | ····*·cpe:/o:centos:centos:10 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 132, 14 lines modified | Offset 132, 27 lines modified | ||
| 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 141 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 142 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 143 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 144 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 145 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 146 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 144 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 152 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 145 | ··set_fact: | 153 | ··set_fact: |
| Offset 266, 27 lines modified | Offset 279, 14 lines modified | ||
| 266 | ··-·PCI-DSSv4-11.5.2 | 279 | ··-·PCI-DSSv4-11.5.2 |
| 267 | ··-·high_complexity | 280 | ··-·high_complexity |
| 268 | ··-·high_severity | 281 | ··-·high_severity |
| 269 | ··-·medium_disruption | 282 | ··-·medium_disruption |
| 270 | ··-·no_reboot_needed | 283 | ··-·no_reboot_needed |
| 271 | ··-·restrict_strategy | 284 | ··-·restrict_strategy |
| 272 | ··-·rpm_verify_hashes | 285 | ··-·rpm_verify_hashes |
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 274 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 275 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 276 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 277 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 278 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 279 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 280 | fi | ||
| 281 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 286 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 282 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 287 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 283 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 288 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 284 | run·the·following·command·to·determine·which·package·owns·it: | 289 | run·the·following·command·to·determine·which·package·owns·it: |
| 285 | $·rpm·-qf·FILENAME | 290 | $·rpm·-qf·FILENAME |
| 286 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 291 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 287 | $·sudo·rpm·--setugids·PACKAGENAME | 292 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 305, 14 lines modified | Offset 305, 40 lines modified | ||
| 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 317 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 318 | declare·-A·SETPERMS_RPM_DICT | ||
| 319 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 320 | #·is·expected·by·the·RPM·database | ||
| 321 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 322 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 323 | do | ||
| 324 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 325 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 326 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 327 | done | ||
| 328 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 329 | #·correct·values | ||
| 330 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 331 | do | ||
| 332 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 333 | done | ||
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 317 | -·name:·Read·list·of·files·with·incorrect·ownership | 339 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 318 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 340 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 387, 40 lines modified | Offset 413, 14 lines modified | ||
| 387 | ··-·PCI-DSSv4-11.5.2 | 413 | ··-·PCI-DSSv4-11.5.2 |
| 388 | ··-·high_complexity | 414 | ··-·high_complexity |
| 389 | ··-·high_severity | 415 | ··-·high_severity |
| 390 | ··-·medium_disruption | 416 | ··-·medium_disruption |
| 391 | ··-·no_reboot_needed | 417 | ··-·no_reboot_needed |
| 392 | ··-·restrict_strategy | 418 | ··-·restrict_strategy |
| 393 | ··-·rpm_verify_ownership | 419 | ··-·rpm_verify_ownership |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 399 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1144555/1152202 bytes (99.34%) of diff not shown. | |||
| Offset 14421, 15 lines modified | Offset 14421, 15 lines modified | ||
| 00038540:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038540:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038550:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038550:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038560:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038560:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038570:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038570:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038580:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038580:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038590:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038590:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 000385a0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 000385a0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 000385b0:·3230·323 | 000385b0:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 000385c0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 000385c0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 000385d0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 000385d0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 000385e0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 000385e0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 000385f0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 000385f0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038600:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038600:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038610:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038610:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038620:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038620:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15299, 301 lines modified | Offset 15299, 301 lines modified | ||
| 0003bc20:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003bc20:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003bc30:·743d·2223·6964·6d36·3933·3422·2074·6162··t="#idm6934"·tab | 0003bc30:·743d·2223·6964·6d36·3933·3422·2074·6162··t="#idm6934"·tab | ||
| 0003bc40:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003bc40:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003bc50:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003bc50:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003bc60:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003bc60:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003bc70:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003bc70:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003bc80:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003bc80:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003bc90:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003bca0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003bcb0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bcc0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bcd0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bce0:·6964·6d36·3933·3422·3e3c·7072·653e·3c63··idm6934"><pre><c | |||
| 0003bcf0:·6f64·653e·0a23·2046·696e·6420·7768·6963··ode>.#·Find·whic | |||
| 0003bd00:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | |||
| 0003bd10:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | |||
| 0003bd20:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | |||
| 0003bd30:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | |||
| 0003bd40:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | |||
| 0003bd50:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | |||
| 0003bd60:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | |||
| 0003bd70:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003bd80:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | |||
| 0003bd90:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | |||
| 0003bda0:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | |||
| 0003bdb0:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | |||
| 0003bdc0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | |||
| 0003bdd0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | |||
| 0003bde0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | |||
| 0003bdf0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | |||
| 0003be00:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | |||
| 0003be10:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | |||
| 0003be20:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | |||
| 0003be30:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | |||
| 0003be40:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | |||
| 0003be50:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | |||
| 0003be60:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | |||
| 0003be70:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | |||
| 0003be80:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | |||
| 0003be90:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003bea0:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | |||
| 0003beb0:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | |||
| 0003bec0:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | |||
| 0003bed0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | |||
| 0003bee0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | |||
| 0003bef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bf00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bf10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bf20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bf30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bf40:·743d·2223·6964·6d36·3933·3522·2074·6162··t="#idm6935"·tab | |||
| 0003bf50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bf60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bf70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bf80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bf90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b | 0003bfa0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b | 0003bfb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003b | 0003bfc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003bfd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003bfe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003bff0:·643d·2269·646d·3639·3335·223e·3c74·6162··d="idm6935"><tab | ||
| 0003 | 0003c000:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003 | 0003c010:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003 | 0003c020:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003 | 0003c030:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003 | 0003c040:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003 | 0003c050:·3a3c·2f74·683e·3c74·643e·6869·6768·3c2f··:</th><td>high</ | ||
| 0003 | 0003c060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003 | 0003c070:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003 | 0003c080:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | ||
| 0003 | 0003c090:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003 | 0003c0a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003 | 0003c0b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003 | 0003c0c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003 | 0003c0d0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | ||
| 0003 | 0003c0e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003 | 0003c0f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003 | 0003c100:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| 0003 | 0003c110:·6b61·6765·206d·616e·6167·6572·2072·6569··kage·manager·rei | ||
| 0003 | 0003c120:·6e73·7461·6c6c·2063·6f6d·6d61·6e64·270a··nstall·command'. | ||
| 0003 | 0003c130:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 0003 | 0003c140:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | ||
| 0003 | 0003c150:·7265·696e·7374·616c·6c5f·636d·643a·2064··reinstall_cmd:·d | ||
| 0003 | 0003c160:·6e66·2072·6569·6e73·7461·6c6c·202d·790a··nf·reinstall·-y. | ||
| 0003 | 0003c170:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | ||
| 0003 | 0003c180:·6469·7374·7269·6275·7469·6f6e·2069·6e20··distribution·in· | ||
| 0003 | 0003c190:·5b20·2246·6564·6f72·6122·2c20·2252·6564··[·"Fedora",·"Red | ||
| 0003 | 0003c1a0:·4861·7422·2c20·2243·656e·744f·5322·2c20··Hat",·"CentOS",· | ||
| 0003 | 0003c1b0:·224f·7261·636c·654c·696e·7578·2220·5d0a··"OracleLinux"·]. | ||
| 0003 | 0003c1c0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003 | 0003c1d0:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003 | 0003c1e0:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003 | 0003c1f0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003 | 0003c200:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003 | 0003c210:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003 | 0003c220:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003 | 0003c230:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003 | 0003c240:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003 | 0003c250:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003 | 0003c260:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003 | 0003c270:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003 | 0003c280:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003 | 0003c290:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003 | 0003c2a0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003 | 0003c2b0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003 | 0003c2c0:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003 | 0003c2d0:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003 | 0003c2e0:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003 | 0003c2f0:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003 | 0003c300:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| Max diff block lines reached; 15781658/15822974 bytes (99.74%) of diff not shown. | |||
| Offset 62, 15 lines modified | Offset 62, 15 lines modified | ||
| 62 | ··············Linux·10 | 62 | ··············Linux·10 |
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:10 | 65 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 66 | ····*·cpe:/o:centos:centos:10 | 66 | ····*·cpe:/o:centos:centos:10 |
| 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 74 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 129, 14 lines modified | Offset 129, 27 lines modified | ||
| 129 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 129 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 130 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 130 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 131 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 131 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 138 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 139 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 140 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 141 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 142 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 143 | fi | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 141 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 149 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 142 | ··set_fact: | 150 | ··set_fact: |
| Offset 263, 27 lines modified | Offset 276, 14 lines modified | ||
| 263 | ··-·PCI-DSSv4-11.5.2 | 276 | ··-·PCI-DSSv4-11.5.2 |
| 264 | ··-·high_complexity | 277 | ··-·high_complexity |
| 265 | ··-·high_severity | 278 | ··-·high_severity |
| 266 | ··-·medium_disruption | 279 | ··-·medium_disruption |
| 267 | ··-·no_reboot_needed | 280 | ··-·no_reboot_needed |
| 268 | ··-·restrict_strategy | 281 | ··-·restrict_strategy |
| 269 | ··-·rpm_verify_hashes | 282 | ··-·rpm_verify_hashes |
| 270 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 271 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 272 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 273 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 274 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 275 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 276 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 277 | fi | ||
| 278 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 283 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 279 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 284 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 280 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 285 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 281 | run·the·following·command·to·determine·which·package·owns·it: | 286 | run·the·following·command·to·determine·which·package·owns·it: |
| 282 | $·rpm·-qf·FILENAME | 287 | $·rpm·-qf·FILENAME |
| 283 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 288 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 284 | $·sudo·rpm·--setugids·PACKAGENAME | 289 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 302, 14 lines modified | Offset 302, 40 lines modified | ||
| 302 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 302 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 303 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 303 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 304 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 304 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 305 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 305 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 306 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 306 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 307 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 307 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 308 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 308 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 314 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 315 | declare·-A·SETPERMS_RPM_DICT | ||
| 316 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 317 | #·is·expected·by·the·RPM·database | ||
| 318 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 319 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 320 | do | ||
| 321 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 322 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 323 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 324 | done | ||
| 325 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 326 | #·correct·values | ||
| 327 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 328 | do | ||
| 329 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 330 | done | ||
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 331 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 332 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 333 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 334 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 335 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 314 | -·name:·Read·list·of·files·with·incorrect·ownership | 336 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 315 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 337 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 384, 40 lines modified | Offset 410, 14 lines modified | ||
| 384 | ··-·PCI-DSSv4-11.5.2 | 410 | ··-·PCI-DSSv4-11.5.2 |
| 385 | ··-·high_complexity | 411 | ··-·high_complexity |
| 386 | ··-·high_severity | 412 | ··-·high_severity |
| 387 | ··-·medium_disruption | 413 | ··-·medium_disruption |
| 388 | ··-·no_reboot_needed | 414 | ··-·no_reboot_needed |
| 389 | ··-·restrict_strategy | 415 | ··-·restrict_strategy |
| 390 | ··-·rpm_verify_ownership | 416 | ··-·rpm_verify_ownership |
| 391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 396 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1582972/1590621 bytes (99.52%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000384f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038500:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038500:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038510:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038510:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038520:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038520:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038530:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038530:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038540:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038540:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038550:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038560:·206f·6620·3230·323 | 00038560:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00038570:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038570:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038580:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038580:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038590:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038590:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000385a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000385a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000385b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000385b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000385c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000385c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000385d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000385d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15213, 233 lines modified | Offset 15213, 233 lines modified | ||
| 0003b6c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b6c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b6d0:·3732·3733·2220·7461·6269·6e64·6578·3d22··7273"·tabindex=" | 0003b6d0:·3732·3733·2220·7461·6269·6e64·6578·3d22··7273"·tabindex=" | ||
| 0003b6e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b6e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b6f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b6f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b700:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b700:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b710:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b710:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b720:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b720:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b730:·6469·6174·696f·6e20· | 0003b730:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003b740:· | 0003b740:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b750:· | 0003b750:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b760:· | 0003b760:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b770:·6 | 0003b770:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | ||
| 0003b780:·373 | 0003b780:·3733·223e·3c74·6162·6c65·2063·6c61·7373··73"><table·class | ||
| 0003b790:· | 0003b790:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b7a0:·7 | 0003b7a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b7b0:· | 0003b7b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b7c0:·6 | 0003b7c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b7d0:· | 0003b7d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b7e0:· | 0003b7e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b7f0:· | 0003b7f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b800:·6 | 0003b800:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b810:· | 0003b810:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b820:· | 0003b820:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b830:·6 | 0003b830:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b840:· | 0003b840:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b850:· | 0003b850:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003b860:· | 0003b860:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b870:· | 0003b870:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | ||
| 0003b880:· | 0003b880:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | ||
| 0003b890:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b8a0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b8b0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b8c0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b8d0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b8e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b8f0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b900:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b910:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b920:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b930:·2223·6964·6d37·3237·3422·2074·6162·696e··"#idm7274"·tabin | |||
| 0003b940:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b950:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b960:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b970:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b980:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b990:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b9a0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b9b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b9c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b9d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b9e0:·6d37·3237·3422·3e3c·7461·626c·6520·636c··m7274"><table·cl | |||
| 0003b9f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ba00:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ba10:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ba20:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ba30:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ba40:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ba50:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ba60:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ba70:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ba80:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ba90:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003baa0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bab0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003bac0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003bad0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003bae0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003baf0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003bb00:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003bb10:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003bb20:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003bb30:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003bb40:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003bb50:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 0003bb60:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003bb70:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 0003bb80:·2064·6e66·2069·6e73·7461·6c6c·202d·7920···dnf·install·-y· | |||
| 0003bb90:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 0003bba0:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003bbb0:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003bbc0:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003bbd0:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003bbe0:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003bbf0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bc00:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bc10:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bc20:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bc30:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003bc40:·3237·3522·2074·6162·696e·6465·783d·2230··275"·tabindex="0 | |||
| 0003bc50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bc60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bc70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bc80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bc90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003bca0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003bcb0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003bcc0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bcd0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bce0:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003bcf0:·3735·223e·3c74·6162·6c65·2063·6c61·7373··75"><table·class | |||
| 0003bd00:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bd10:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bd20:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bd30:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bd40:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bd50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bd60:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003bd70:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003bd80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bd90:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003bda0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| Max diff block lines reached; 32685967/32717899 bytes (99.90%) of diff not shown. | |||
| Offset 14416, 16 lines modified | Offset 14416, 16 lines modified | ||
| 000384f0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 000384f0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038500:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038500:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038510:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038510:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038520:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038520:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038530:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038530:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038540:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038540:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038550:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038560:·2028·6173·206f·6620·3230·323 | 00038560:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00038570:·3 | 00038570:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 00038580:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00038580:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00038590:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00038590:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000385a0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000385a0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000385b0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000385b0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000385c0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000385c0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000385d0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000385d0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 000385e0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 000385e0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15213, 234 lines modified | Offset 15213, 234 lines modified | ||
| 0003b6c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b6c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b6d0:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | 0003b6d0:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | ||
| 0003b6e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b6e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b6f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b6f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b700:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b700:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b710:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b710:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b720:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b720:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b730:·5265·6d65·6469·6174·696f·6e20· | 0003b730:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003b740:·6 | 0003b740:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | ||
| 0003b750:· | 0003b750:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b760:· | 0003b760:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b770:· | 0003b770:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b780:· | 0003b780:·646d·3732·3733·223e·3c74·6162·6c65·2063··dm7273"><table·c | ||
| 0003b790:· | 0003b790:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b7a0:·6 | 0003b7a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b7b0:·6 | 0003b7b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b7c0:· | 0003b7c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b7d0:· | 0003b7d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b7e0:· | 0003b7e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b7f0:· | 0003b7f0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b800:·7 | 0003b800:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b810:· | 0003b810:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b820:· | 0003b820:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b830:· | 0003b830:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b840:· | 0003b840:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b850:·6 | 0003b850:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b860:·6 | 0003b860:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b870:· | 0003b870:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b880:·6 | 0003b880:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | ||
| 0003b890:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b8a0:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b8b0:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b8c0:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b8d0:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b8e0:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b8f0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b900:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b910:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b920:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b930:·6765·743d·2223·6964·6d37·3237·3422·2074··get="#idm7274"·t | |||
| 0003b940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b9a0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b9b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b9c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b9d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b9e0:·3d22·6964·6d37·3237·3422·3e3c·7461·626c··="idm7274"><tabl | |||
| 0003b9f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ba00:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ba10:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ba20:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ba30:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ba40:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ba50:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ba60:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ba70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ba80:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ba90:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003baa0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bab0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bac0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bad0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bae0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003baf0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003bb00:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003bb10:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003bb20:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003bb30:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003bb40:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003bb50:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003bb60:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003bb70:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003bb80:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| 0003bb90:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003bba0:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003bbb0:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003bbc0:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003bbd0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003bbe0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003bbf0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003bc00:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bc10:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bc20:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bc30:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bc40:·6964·6d37·3237·3522·2074·6162·696e·6465··idm7275"·tabinde | |||
| 0003bc50:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bc60:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bc70:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bc80:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bc90:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bca0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003bcb0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003bcc0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bcd0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bce0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bcf0:·646d·3732·3735·223e·3c74·6162·6c65·2063··dm7275"><table·c | |||
| 0003bd00:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bd10:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bd20:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bd30:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bd40:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bd50:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd60:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bd70:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bd80:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bd90:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| Max diff block lines reached; 32594935/32627143 bytes (99.90%) of diff not shown. | |||
| Offset 14430, 15 lines modified | Offset 14430, 15 lines modified | ||
| 000385d0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385d0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385e0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385e0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 000385f0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 000385f0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038600:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038600:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038610:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038610:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038620:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038620:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038630:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038630:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038640:·6620·3230·323 | 00038640:·6620·3230·3235·2d31·322d·3130·290a·2020··f·2025-12-10).·· | ||
| 00038650:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038650:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038660:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038660:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038670:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038670:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038680:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038680:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038690:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038690:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386a0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386a0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386b0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386b0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15182, 235 lines modified | Offset 15182, 235 lines modified | ||
| 0003b4d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b4d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b4e0:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | 0003b4e0:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | ||
| 0003b4f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b4f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b500:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b500:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b510:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b510:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b520:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b520:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b530:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b530:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b540:·6564·6961·7469·6f6e·20 | 0003b540:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | ||
| 0003b550:· | 0003b550:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b560:· | 0003b560:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b570:· | 0003b570:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b580:·6 | 0003b580:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | ||
| 0003b590:· | 0003b590:·3432·3822·3e3c·7461·626c·6520·636c·6173··428"><table·clas | ||
| 0003b5a0:· | 0003b5a0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b5b0:· | 0003b5b0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b5c0:·6 | 0003b5c0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b5d0:·6 | 0003b5d0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b5e0:· | 0003b5e0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b5f0:· | 0003b5f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b600:· | 0003b600:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b610:· | 0003b610:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b620:· | 0003b620:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b630:· | 0003b630:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b640:· | 0003b640:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b650:· | 0003b650:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b660:· | 0003b660:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b670:· | 0003b670:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b680:·6 | 0003b680:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | ||
| 0003b690:·7061·636b·6167·6520·2d2d·6164·643d·6169··package·--add=ai | |||
| 0003b6a0:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003b6b0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b6c0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b6d0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b6e0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b6f0:·6765·743d·2223·6964·6d38·3432·3922·2074··get="#idm8429"·t | |||
| 0003b700:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b710:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b720:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b730:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b740:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b750:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b760:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b770:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b780:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b790:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b7a0:·6964·3d22·6964·6d38·3432·3922·3e3c·7461··id="idm8429"><ta | |||
| 0003b7b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b7c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b7d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b7e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b7f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b800:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b810:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003b690:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | ||
| 0003b6a0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b6b0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b6c0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b6d0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b6e0:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b6f0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b700:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b710:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b720:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b730:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b740:·3d22·2369·646d·3834·3239·2220·7461·6269··="#idm8429"·tabi | |||
| 0003b750:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b760:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b770:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b780:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b790:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b7a0:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003b7b0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003b7c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b7d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b7e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b7f0:·646d·3834·3239·223e·3c74·6162·6c65·2063··dm8429"><table·c | |||
| 0003b800:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b810:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b820:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b830:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b840:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b8 | 0003b850:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b840:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b8 | 0003b860:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b870:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b8 | 0003b880:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b870:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b880:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b890:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b8a0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b8b0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b8c0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b8d0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b8e0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b8f0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b | 0003b890:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b8a0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b8b0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b8c0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b8d0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b8e0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b8f0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003b900:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003b910:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003b920:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 0003b930:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 0003b940:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 0003b950:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 0003b960:·6e76·205d·3b20·7468·656e·0a0a·6966·2021··nv·];·then..if·! | |||
| 0003b970:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003b980:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| Max diff block lines reached; 21962012/21994220 bytes (99.85%) of diff not shown. | |||
| Offset 14429, 15 lines modified | Offset 14429, 15 lines modified | ||
| 000385c0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385c0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385d0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385d0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 000385e0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 000385e0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 000385f0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 000385f0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038600:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038600:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038610:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038610:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038620:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038620:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038630:·6620·3230·323 | 00038630:·6620·3230·3235·2d31·322d·3130·290a·2020··f·2025-12-10).·· | ||
| 00038640:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038640:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038650:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038650:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038660:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038660:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038670:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038670:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038680:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038680:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038690:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038690:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386a0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386a0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15187, 235 lines modified | Offset 15187, 235 lines modified | ||
| 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b530:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 0003b530:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b590:·5265·6d65·6469·6174·696f·6e20· | 0003b590:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003b5a0:·6 | 0003b5a0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | ||
| 0003b5b0:· | 0003b5b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b5c0:· | 0003b5c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b5d0:· | 0003b5d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b5e0:· | 0003b5e0:·646d·3834·3238·223e·3c74·6162·6c65·2063··dm8428"><table·c | ||
| 0003b5f0:· | 0003b5f0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b600:·6 | 0003b600:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b610:·6 | 0003b610:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b620:· | 0003b620:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b630:· | 0003b630:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b640:· | 0003b640:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b650:· | 0003b650:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b660:·7 | 0003b660:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b670:· | 0003b670:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b680:· | 0003b680:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b690:· | 0003b690:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b6a0:· | 0003b6a0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b6b0:·6 | 0003b6b0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b6c0:·6 | 0003b6c0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b6d0:· | 0003b6d0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b6e0:·653e·0a70·6163·6b61·6765·202d·2d61·6464··e>.package·--add | |||
| 0003b6f0:·3d61·6964·650a·3c2f·636f·6465·3e3c·2f70··=aide.</code></p | |||
| 0003b700:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b710:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b720:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b730:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b740:·7461·7267·6574·3d22·2369·646d·3834·3239··target="#idm8429 | |||
| 0003b750:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b760:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b770:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b780:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b790:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b7a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b7b0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b7c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b7d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b7e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b7f0:·6522·2069·643d·2269·646d·3834·3239·223e··e"·id="idm8429"> | |||
| 0003b800:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b810:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b820:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b830:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b840:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b850:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b860:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003b6e0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | ||
| 0003b6f0:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b700:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b710:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b720:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b730:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b740:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b750:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b760:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b770:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b780:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b790:·6765·743d·2223·6964·6d38·3432·3922·2074··get="#idm8429"·t | |||
| 0003b7a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b7b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b7c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b7d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b7e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b7f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b800:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b810:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b820:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b830:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b840:·3d22·6964·6d38·3432·3922·3e3c·7461·626c··="idm8429"><tabl | |||
| 0003b850:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b860:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b870:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b880:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b890:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b8 | 0003b8a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b8 | 0003b8b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b8a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b8b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b8c0:·7 | 0003b8c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b8d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b8e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b8 | 0003b8f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b8e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b8f0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b900:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b910:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b920:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b930:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b940:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b9 | 0003b900:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b910:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b920:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b930:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b940:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003b950:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003b960:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003b970:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003b980:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003b990:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003b9a0:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003b9b0:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003b9c0:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003b9d0:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003b9e0:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| Max diff block lines reached; 22379836/22412044 bytes (99.86%) of diff not shown. | |||
| Offset 14431, 15 lines modified | Offset 14431, 15 lines modified | ||
| 000385e0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385e0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385f0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385f0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038600:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038600:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038610:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038610:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038620:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038620:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038630:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038630:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038640:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038640:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038650:·6620·3230·323 | 00038650:·6620·3230·3235·2d31·322d·3130·290a·2020··f·2025-12-10).·· | ||
| 00038660:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038660:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038670:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038670:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038680:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038680:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038690:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038690:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386a0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386a0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386b0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386b0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386c0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386c0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15178, 235 lines modified | Offset 15178, 235 lines modified | ||
| 0003b490:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | 0003b490:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b4a0:·3238·2220·7461·6269·6e64·6578·3d22·3022··28"·tabindex="0" | 0003b4a0:·3238·2220·7461·6269·6e64·6578·3d22·3022··28"·tabindex="0" | ||
| 0003b4b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b4b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b4c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b4c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b4d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b4d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b4e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b4e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b4f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b4f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b500:·6174·696f·6e20· | 0003b500:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | ||
| 0003b510:· | 0003b510:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b520:· | 0003b520:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b530:·6 | 0003b530:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b540:· | 0003b540:·7073·6522·2069·643d·2269·646d·3834·3238··pse"·id="idm8428 | ||
| 0003b550:· | 0003b550:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b560:· | 0003b560:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b570:·7 | 0003b570:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b580:·65 | 0003b580:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b590:·6 | 0003b590:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b5a0:·6 | 0003b5a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b5b0:·6 | 0003b5b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b5c0:· | 0003b5c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b5d0:· | 0003b5d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b5e0:· | 0003b5e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b5f0:· | 0003b5f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b600:·6 | 0003b600:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b610:· | 0003b610:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b620:· | 0003b620:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b630:· | 0003b630:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b640:· | 0003b640:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | ||
| 0003b650:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 0003b6 | 0003b650:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | ||
| 0003b660:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b670:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b680:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b690:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b6a0:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b6b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b6c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b6d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b6e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b6f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b700:·6964·6d38·3432·3922·2074·6162·696e·6465··idm8429"·tabinde | |||
| 0003b710:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b720:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b730:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b740:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b750:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b760:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b770:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b | 0003b780:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b790:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b7a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b7b0:·3432·3922·3e3c·7461·626c·6520·636c·6173··429"><table·clas | |||
| 0003b7c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b7d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b7e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b7f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b800:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b680:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b690:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b6a0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b6b0:·3d22·2369·646d·3834·3239·2220·7461·6269··="#idm8429"·tabi | |||
| 0003b6c0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b6d0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b6e0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b6f0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b700:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b710:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b720:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b730:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b740:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b750:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b760:·2269·646d·3834·3239·223e·3c74·6162·6c65··"idm8429"><table | |||
| 0003b770:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b780:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b790:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b7a0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b7b0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b7c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b7d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b7e0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b | 0003b810:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b800:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b8 | 0003b820:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b830:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b8 | 0003b840:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b830:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b840:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b850:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b860:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b870:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b880:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b890:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b8a0:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b8b0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b8 | 0003b850:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b860:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b870:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b880:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b890:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b8a0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b8b0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b8c0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b8d0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b8e0:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b8f0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b900:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b910:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b920:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b930:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b940:·6465·2220·3b20·7468·656e·0a20·2020·2064··de"·;·then.····d | |||
| 0003b950:·6e66·2069·6e73·7461·6c6c·202d·7920·2261··nf·install·-y·"a | |||
| Max diff block lines reached; 9178780/9210988 bytes (99.65%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 135, 33 lines modified | Offset 135, 41 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 139 | ············_\x8c_\x8i_\x8s············6.1.1 | 139 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package·--add=aide | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | include·install_aide | 147 | include·install_aide |
| 154 | class·install_aide·{ | 148 | class·install_aide·{ |
| 155 | ··package·{·'aide': | 149 | ··package·{·'aide': |
| 156 | ····ensure·=>·'installed', | 150 | ····ensure·=>·'installed', |
| 157 | ··} | 151 | ··} |
| 158 | } | 152 | } |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 160 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 161 | ····dnf·install·-y·"aide" | ||
| 162 | fi | ||
| 163 | else | ||
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 165 | fi | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | -·name:·Ensure·aide·is·installed | 171 | -·name:·Ensure·aide·is·installed |
| 165 | ··package: | 172 | ··package: |
| Offset 181, 36 lines modified | Offset 189, 28 lines modified | ||
| 181 | ··-·no_reboot_needed | 189 | ··-·no_reboot_needed |
| 182 | ··-·package_aide_installed | 190 | ··-·package_aide_installed |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 184 | [[packages]] | 192 | [[packages]] |
| 185 | name·=·"aide" | 193 | name·=·"aide" |
| 186 | version·=·"*" | 194 | version·=·"*" |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 193 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 194 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 195 | ····dnf·install·-y·"aide" | ||
| 196 | fi | ||
| 200 | package·install·aide | ||
| 197 | else | ||
| 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 199 | fi | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 205 | package· | 206 | package·--add=aide |
| 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 207 | Run·the·following·command·to·generate·a·new·database: | 208 | Run·the·following·command·to·generate·a·new·database: |
| 208 | $·sudo·/usr/sbin/aide·--init | 209 | $·sudo·/usr/sbin/aide·--init |
| 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 210 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 211 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 211 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 212 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 212 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 213 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 235, 14 lines modified | Offset 235, 28 lines modified | ||
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 236 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 236 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 238 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 238 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 239 | ············_\x8c_\x8i_\x8s············6.1.1 | 239 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 241 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 241 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 243 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 244 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 245 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 246 | ····dnf·install·-y·"aide" | ||
| 247 | fi | ||
| 248 | /usr/sbin/aide·--init | ||
| 249 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 250 | else | ||
| 251 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 252 | fi | ||
| 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 243 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 244 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1056049/1061870 bytes (99.45%) of diff not shown. | |||
| Offset 14430, 15 lines modified | Offset 14430, 15 lines modified | ||
| 000385d0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 000385d0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 000385e0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 000385e0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 000385f0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 000385f0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038600:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038600:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038610:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038610:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038620:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038620:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038630:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038630:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038640:·323 | 00038640:·3235·2d31·322d·3130·290a·2020·2020·2020··25-12-10).······ | ||
| 00038650:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038650:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038660:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038660:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038670:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038670:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038680:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038680:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038690:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038690:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000386a0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000386a0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000386b0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 000386b0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 14849, 216 lines modified | Offset 14849, 216 lines modified | ||
| 0003a000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003a000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003a010:·3132·3538·3922·2074·6162·696e·6465·783d··12589"·tabindex= | 0003a010:·3132·3538·3922·2074·6162·696e·6465·783d··12589"·tabindex= | ||
| 0003a020:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003a020:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003a030:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003a030:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003a040:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003a040:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003a050:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003a050:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003a060:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003a060:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003a070:·6564·6961·7469·6f6e·20 | 0003a070:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | ||
| 0003a080:· | 0003a080:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003a090:· | 0003a090:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003a0a0:· | 0003a0a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003a0b0:·6 | 0003a0b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | ||
| 0003a0c0:· | 0003a0c0:·3235·3839·223e·3c74·6162·6c65·2063·6c61··2589"><table·cla | ||
| 0003a0d0:· | 0003a0d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003a0e0:· | 0003a0e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003a0f0:· | 0003a0f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003a100:·6 | 0003a100:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003a110:· | 0003a110:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003a120:· | 0003a120:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003a130:· | 0003a130:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003a140:· | 0003a140:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003a150:· | 0003a150:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003a160:· | 0003a160:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003a170:· | 0003a170:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003a180:· | 0003a180:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003a190:· | 0003a190:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003a1a0:·6 | 0003a1a0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003a1b0:·6 | 0003a1b0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | ||
| 0003a1c0:·0a70·6163·6b61·6765·202d·2d61·6464·3d64··.package·--add=d | |||
| 0003a1d0:·6e66·2d61·7574·6f6d·6174·6963·0a3c·2f63··nf-automatic.</c | |||
| 0003a1e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003a1f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003a200:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003a210:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003a220:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003a230:·6964·6d31·3235·3930·2220·7461·6269·6e64··idm12590"·tabind | |||
| 0003a240:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003a250:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003a260:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003a270:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003a280:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003a290:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003a2a0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003a2b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003a2c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003a2d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003a2e0:·646d·3132·3539·3022·3e3c·7461·626c·6520··dm12590"><table· | |||
| 0003a2f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003a300:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003a310:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003a320:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003a330:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003a340:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003a350:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003a360:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003a370:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003a380:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003a390:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003a3a0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003a3b0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003a3c0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003a3d0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003a3e0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003a3f0:·5f64·6e66·2d61·7574·6f6d·6174·6963·0a0a··_dnf-automatic.. | |||
| 0003a | 0003a1c0:·636c·7564·6520·696e·7374·616c·6c5f·646e··clude·install_dn | ||
| 0003a | 0003a1d0:·662d·6175·746f·6d61·7469·630a·0a63·6c61··f-automatic..cla | ||
| 0003a | 0003a1e0:·7373·2069·6e73·7461·6c6c·5f64·6e66·2d61··ss·install_dnf-a | ||
| 0003a | 0003a1f0:·7574·6f6d·6174·6963·207b·0a20·2070·6163··utomatic·{.··pac | ||
| 0003a200:·6b61·6765·207b·2027·646e·662d·6175·746f··kage·{·'dnf-auto | |||
| 0003a210:·6d61·7469·6327·3a0a·2020·2020·656e·7375··matic':.····ensu | |||
| 0003a220:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003a230:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003a440:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003a450:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003a460:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003a470:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003a480:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003a490:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003a4a0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003a4b0:·2223·6964·6d31·3235·3931·2220·7461·6269··"#idm12591"·tabi | |||
| 0003a4c0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003a4d0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003a4e0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003a4f0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003a500:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003a510:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003a520:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003a530:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a540:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a550:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a560:·3d22·6964·6d31·3235·3931·223e·3c74·6162··="idm12591"><tab | |||
| 0003a570:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003a580:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a590:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a5a0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a5b0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a5c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a5d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a5e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a5f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a600:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a610:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a620:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a630:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003a640:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003a650:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003a660:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003a670:·7265·2064·6e66·2d61·7574·6f6d·6174·6963··re·dnf-automatic | |||
| 0003a680:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003a690:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003a6a0:·653a·2064·6e66·2d61·7574·6f6d·6174·6963··e:·dnf-automatic | |||
| Max diff block lines reached; 3110071/3139657 bytes (99.06%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 75 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 76 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 76 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 77 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 77 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 100, 33 lines modified | Offset 100, 35 lines modified | ||
| 100 | $·sudo·dnf·install·dnf-automatic | 100 | $·sudo·dnf·install·dnf-automatic |
| 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 102 | ············suitable·for·automatic,·regular·execution. | 102 | ············suitable·for·automatic,·regular·execution. |
| 103 | Severity: ··medium | 103 | Severity: ··medium |
| 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 105 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 105 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 106 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 106 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 112 | package·--add=dnf-automatic | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | include·install_dnf-automatic | 112 | include·install_dnf-automatic |
| 119 | class·install_dnf-automatic·{ | 113 | class·install_dnf-automatic·{ |
| 120 | ··package·{·'dnf-automatic': | 114 | ··package·{·'dnf-automatic': |
| 121 | ····ensure·=>·'installed', | 115 | ····ensure·=>·'installed', |
| 122 | ··} | 116 | ··} |
| 123 | } | 117 | } |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 124 | ····dnf·install·-y·"dnf-automatic" | ||
| 125 | fi | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | -·name:·Ensure·dnf-automatic·is·installed | 131 | -·name:·Ensure·dnf-automatic·is·installed |
| 130 | ··package: | 132 | ··package: |
| Offset 140, 30 lines modified | Offset 142, 28 lines modified | ||
| 140 | ··-·no_reboot_needed | 142 | ··-·no_reboot_needed |
| 141 | ··-·package_dnf-automatic_installed | 143 | ··-·package_dnf-automatic_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | [[packages]] | 145 | [[packages]] |
| 144 | name·=·"dnf-automatic" | 146 | name·=·"dnf-automatic" |
| 145 | version·=·"*" | 147 | version·=·"*" |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | package·install·dnf-automatic | ||
| 151 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 152 | ····dnf·install·-y·"dnf-automatic" | ||
| 153 | fi | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | package· | 159 | package·--add=dnf-automatic |
| 160 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 160 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 161 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 161 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 162 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 162 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 163 | automatic.conf. | 163 | automatic.conf. |
| 164 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 164 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 165 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 165 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 166 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 166 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 173, 36 lines modified | Offset 173, 14 lines modified | ||
| 173 | Severity: ··medium | 173 | Severity: ··medium |
| 174 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 174 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 175 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 175 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 176 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 176 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 177 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 177 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 178 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 178 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 179 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 179 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 185 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 186 | ··ini_file: | ||
| 187 | ····dest:·/etc/dnf/automatic.conf | ||
| 188 | ····section:·commands | ||
| 189 | ····option:·apply_updates | ||
| 190 | ····value:·'yes' | ||
| 191 | ····create:·true | ||
| 192 | ··tags: | ||
| 193 | ··-·NIST-800-53-CM-6(a) | ||
| 194 | ··-·NIST-800-53-SI-2(5) | ||
| 195 | ··-·NIST-800-53-SI-2(c) | ||
| 196 | ··-·dnf-automatic_apply_updates | ||
| 197 | ··-·low_complexity | ||
| 198 | ··-·medium_disruption | ||
| 199 | ··-·medium_severity | ||
| 200 | ··-·no_reboot_needed | ||
| 201 | ··-·unknown_strategy | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 203 | found=false | 181 | found=false |
| 204 | #·set·value·in·all·files·if·they·contain·section·or·key | 182 | #·set·value·in·all·files·if·they·contain·section·or·key |
| 205 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | 183 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do |
| 206 | ····if·[·!·-e·"$f"·];·then | 184 | ····if·[·!·-e·"$f"·];·then |
| Max diff block lines reached; 220083/225781 bytes (97.48%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 000384f0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038500:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038500:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038510:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038510:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038520:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038520:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038530:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038530:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038540:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038540:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038550:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038560:·7320·6f66·2032·3032·3 | 00038560:·7320·6f66·2032·3032·352d·3132·2d31·3029··s·of·2025-12-10) | ||
| 00038570:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038570:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038580:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038580:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038590:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038590:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000385a0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000385a0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000385b0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000385b0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000385c0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000385c0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000385d0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000385d0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15226, 249 lines modified | Offset 15226, 249 lines modified | ||
| 0003b790:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | 0003b790:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 0003b7a0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | 0003b7a0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | ||
| 0003b7b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b7b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b7c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b7c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b7d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b7d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b7e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b7e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b7f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b7f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b800:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b810:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b820:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b830:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b840:·7365·2220·6964·3d22·6964·6d39·3138·3722··se"·id="idm9187" | |||
| 0003b800:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | |||
| 0003b810:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 0003b820:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b830:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b840:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b850:·6d39·3138·3722·3e3c·7461·626c·6520·636c··m9187"><table·cl | |||
| 0003b860:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b870:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b880:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b890:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b8a0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b8b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b8c0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b8d0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b8e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b8f0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b900:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | |||
| 0003b910:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b920:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | |||
| 0003b930:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | |||
| 0003b | 0003b850:·3e3c·7072·653e·3c63·6f64·653e·0a76·6172··><pre><code>.var | ||
| 0003b860:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003b870:·6f6c·6963·793d·273c·6162·6272·2074·6974··olicy='<abbr·tit | |||
| 0003b880:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003b890:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003b8a0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003b8b0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003b8c0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003b8d0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003b8e0:·554c·543c·2f61·6262·723e·270a·0a0a·7374··ULT</abbr>'...st | |||
| 0003b8f0:·6465·7272·5f6f·665f·6361·6c6c·3d24·2875··derr_of_call=$(u | |||
| 0003b950:·2d2d·2d0a·6170·6956·6572·7369·6f6e·3a20··---.apiVersion:· | |||
| 0003b960:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 0003b970:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 0003b980:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 0003b990:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 0003b9a0:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| 0003b9b0:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | |||
| 0003b9c0:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | |||
| 0003b9d0:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | |||
| 0003b9e0:·6e69·7473·3a0a·2020·2020·2020·2020·2d20··nits:.········-· | |||
| 0003b9f0:·6e61·6d65·3a20·636f·6e66·6967·7572·652d··name:·configure- | |||
| 0003ba00:·6372·7970·746f·2d70·6f6c·6963·792e·7365··crypto-policy.se | |||
| 0003ba10:·7276·6963·650a·2020·2020·2020·2020·2020··rvice.·········· | |||
| 0003ba20:·656e·6162·6c65·643a·2074·7275·650a·2020··enabled:·true.·· | |||
| 0003ba30:·2020·2020·2020·2020·636f·6e74·656e·7473··········contents | |||
| 0003ba40:·3a20·7c0a·2020·2020·2020·2020·2020·2020··:·|.············ | |||
| 0003ba50:·5b55·6e69·745d·0a20·2020·2020·2020·2020··[Unit].········· | |||
| 0003ba60:·2020·2042·6566·6f72·653d·6b75·6265·6c65·····Before=kubele | |||
| 0003ba70:·742e·7365·7276·6963·650a·2020·2020·2020··t.service.······ | |||
| 0003ba80:·2020·2020·2020·5b53·6572·7669·6365·5d0a········[Service]. | |||
| 0003ba90:·2020·2020·2020·2020·2020·2020·5479·7065··············Type | |||
| 0003baa0:·3d6f·6e65·7368·6f74·0a20·2020·2020·2020··=oneshot.······· | |||
| 0003bab0:·2020·2020·2045·7865·6353·7461·7274·3d75·······ExecStart=u | |||
| 0003b | 0003b900:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | ||
| 0003b | 0003b910:·6963·6965·7320·2d2d·7365·7420·247b·7661··icies·--set·${va | ||
| 0003bae0:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 0003baf0:·5f70·6f6c·6963·797d·7d0a·2020·2020·2020··_policy}}.······ | |||
| 0003bb00:·2020·2020·2020·5265·6d61·696e·4166·7465········RemainAfte | |||
| 0003bb10:·7245·7869·743d·7965·730a·2020·2020·2020··rExit=yes.······ | |||
| 0003bb20:·2020·2020·2020·5b49·6e73·7461·6c6c·5d0a········[Install]. | |||
| 0003bb30:·2020·2020·2020·2020·2020·2020·5761·6e74··············Want | |||
| 0003bb40:·6564·4279·3d6d·756c·7469·2d75·7365·722e··edBy=multi-user. | |||
| 0003bb50:·7461·7267·6574·0a3c·2f63·6f64·653e·3c2f··target.</code></ | |||
| 0003bb60:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bb70:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bb80:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bb90:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bba0:·2d74·6172·6765·743d·2223·6964·6d39·3138··-target="#idm918 | |||
| 0003bbb0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003bbc0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bbd0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bbe0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bbf0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bc00:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bc10:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003bc20:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bc30:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bc40:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bc50:·7073·6522·2069·643d·2269·646d·3931·3838··pse"·id="idm9188 | |||
| 0003bc60:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bc70:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bc80:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bc90:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bca0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bcb0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bcc0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bcd0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bce0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bcf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003bd00:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bd10:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003bd20:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bd30:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003bd40:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bd50:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003bd60:·6d65·3a20·5843·4344·4620·5661·6c75·6520··me:·XCCDF·Value· | |||
| 0003b | 0003b920:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | ||
| 0003bd80:·6f5f·706f·6c69·6379·2023·2070·726f·6d6f··o_policy·#·promo | |||
| Max diff block lines reached; 12793431/12827571 bytes (99.73%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Advanced | 60 | ··············Linux·9·-·Advanced |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 119, 39 lines modified | Offset 119, 33 lines modified | ||
| 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 123 | ············_\x8c_\x8i_\x8s······1.6.1 | 123 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 127 | var_system_crypto_policy='DEFAULT' | ||
| 128 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 129 | rc=$? | ||
| 130 | if·test·"$rc"·=·127;·then | ||
| 131 | » echo·"$stderr_of_call"·>&2 | ||
| 132 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 133 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 134 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 135 | » false··#·end·with·an·error·code | ||
| 136 | elif·test·"$rc"·!=·0;·then | ||
| 137 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 138 | » false··#·end·with·an·error·code | ||
| 139 | fi | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 156 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 145 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 157 | ··set_fact: | 146 | ··set_fact: |
| Offset 200, 33 lines modified | Offset 194, 39 lines modified | ||
| 200 | ··-·PCI-DSSv4-2.2.7 | 194 | ··-·PCI-DSSv4-2.2.7 |
| 201 | ··-·configure_crypto_policy | 195 | ··-·configure_crypto_policy |
| 202 | ··-·high_severity | 196 | ··-·high_severity |
| 203 | ··-·low_complexity | 197 | ··-·low_complexity |
| 204 | ··-·low_disruption | 198 | ··-·low_disruption |
| 205 | ··-·no_reboot_needed | 199 | ··-·no_reboot_needed |
| 206 | ··-·restrict_strategy | 200 | ··-·restrict_strategy |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 208 | var_system_crypto_policy='DEFAULT' | ||
| 209 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 210 | rc=$? | ||
| 211 | if·test·"$rc"·=·127;·then | ||
| 212 | » echo·"$stderr_of_call"·>&2 | ||
| 213 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 214 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 215 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 216 | » false··#·end·with·an·error·code | ||
| 217 | elif·test·"$rc"·!=·0;·then | ||
| 218 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | 202 | C.Co.om.mp.pl.le.ex.xi.it.ty.y:.:·low | |
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 206 | --- | ||
| 207 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 208 | kind:·MachineConfig | ||
| 209 | spec: | ||
| 210 | ··config: | ||
| 211 | ····ignition: | ||
| 212 | ······version:·3.1.0 | ||
| 213 | ····systemd: | ||
| 214 | ······units: | ||
| 215 | ········-·name:·configure-crypto-policy.service | ||
| 216 | ··········enabled:·true | ||
| 217 | ··········contents:·| | ||
| 218 | ············[Unit] | ||
| 219 | ············Before=kubelet.service | ||
| 220 | ············[Service] | ||
| 221 | ············Type=oneshot | ||
| 222 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 223 | ············RemainAfterExit=yes | ||
| 224 | ············[Install] | ||
| 225 | ············WantedBy=multi-user.target | ||
| 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 222 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 227 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 223 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 228 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 224 | Severity: ··medium | 229 | Severity: ··medium |
| Max diff block lines reached; 1149903/1155833 bytes (99.49%) of diff not shown. | |||
| Offset 14415, 16 lines modified | Offset 14415, 16 lines modified | ||
| 000384e0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 000384e0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 000384f0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 000384f0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038500:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038500:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038510:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038510:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038520:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038520:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038530:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038530:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038540:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038540:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038550:·2020·2861·7320·6f66·2032·3032·3 | 00038550:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 00038560:·2d3 | 00038560:·2d31·3029·0a20·2020·2020·2020·2020·2020··-10).··········· | ||
| 00038570:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038570:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038580:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038580:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038590:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038590:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 000385a0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 000385a0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 000385b0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 000385b0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 000385c0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 000385c0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 000385d0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 000385d0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15186, 249 lines modified | Offset 15186, 249 lines modified | ||
| 0003b510:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b510:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b520:·3931·3837·2220·7461·6269·6e64·6578·3d22··9187"·tabindex=" | 0003b520:·3931·3837·2220·7461·6269·6e64·6578·3d22··9187"·tabindex=" | ||
| 0003b530:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b530:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b540:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b540:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b550:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b550:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b560:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b560:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b570:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b570:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b580:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b590:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b5a0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b5b0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b5c0:·7073·6522·2069·643d·2269·646d·3931·3837··pse"·id="idm9187 | |||
| 0003b5d0:·223e·3c70·7265·3e3c·636f·6465·3e0a·7661··"><pre><code>.va | |||
| 0003b5e0:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 0003b5f0:·706f·6c69·6379·3d27·3c61·6262·7220·7469··policy='<abbr·ti | |||
| 0003b600:·746c·653d·2266·726f·6d20·5072·6f66·696c··tle="from·Profil | |||
| 0003b610:·652f·7265·6669·6e65·2d76·616c·7565·3a20··e/refine-value:· | |||
| 0003b620:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | |||
| 0003b630:·6a65·6374·2e63·6f6e·7465·6e74·5f76·616c··ject.content_val | |||
| 0003b640:·7565·5f76·6172·5f73·7973·7465·6d5f·6372··ue_var_system_cr | |||
| 0003b650:·7970·746f·5f70·6f6c·6963·7922·3e44·4546··ypto_policy">DEF | |||
| 0003b660:·4155·4c54·3c2f·6162·6272·3e27·0a0a·0a73··AULT</abbr>'...s | |||
| 0003b670:·7464·6572·725f·6f66·5f63·616c·6c3d·2428··tderr_of_call=$( | |||
| 0003b580:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 0003b590:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0003b5a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5d0:·646d·3931·3837·223e·3c74·6162·6c65·2063··dm9187"><table·c | |||
| 0003b5e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b5f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b600:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b610:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b620:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b630:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b640:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b650:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b660:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b670:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b680:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003b690:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b6a0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003b6b0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003b6c0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b6d0:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 0003b6e0:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 0003b6f0:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 0003b700:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 0003b710:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 0003b720:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 0003b730:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 0003b740:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 0003b750:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 0003b760:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 0003b770:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 0003b780:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 0003b790:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 0003b7a0:·2065·6e61·626c·6564·3a20·7472·7565·0a20···enabled:·true.· | |||
| 0003b7b0:·2020·2020·2020·2020·2063·6f6e·7465·6e74···········content | |||
| 0003b7c0:·733a·207c·0a20·2020·2020·2020·2020·2020··s:·|.··········· | |||
| 0003b7d0:·205b·556e·6974·5d0a·2020·2020·2020·2020···[Unit].········ | |||
| 0003b7e0:·2020·2020·4265·666f·7265·3d6b·7562·656c······Before=kubel | |||
| 0003b7f0:·6574·2e73·6572·7669·6365·0a20·2020·2020··et.service.····· | |||
| 0003b800:·2020·2020·2020·205b·5365·7276·6963·655d·········[Service] | |||
| 0003b810:·0a20·2020·2020·2020·2020·2020·2054·7970··.············Typ | |||
| 0003b820:·653d·6f6e·6573·686f·740a·2020·2020·2020··e=oneshot.······ | |||
| 0003b830:·2020·2020·2020·4578·6563·5374·6172·743d········ExecStart= | |||
| 0003b | 0003b680:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | ||
| 0003b | 0003b690:·6c69·6369·6573·202d·2d73·6574·2024·7b76··licies·--set·${v | ||
| 0003b860:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003b870:·6f5f·706f·6c69·6379·7d7d·0a20·2020·2020··o_policy}}.····· | |||
| 0003b880:·2020·2020·2020·2052·656d·6169·6e41·6674·········RemainAft | |||
| 0003b890:·6572·4578·6974·3d79·6573·0a20·2020·2020··erExit=yes.····· | |||
| 0003b8a0:·2020·2020·2020·205b·496e·7374·616c·6c5d·········[Install] | |||
| 0003b8b0:·0a20·2020·2020·2020·2020·2020·2057·616e··.············Wan | |||
| 0003b8c0:·7465·6442·793d·6d75·6c74·692d·7573·6572··tedBy=multi-user | |||
| 0003b8d0:·2e74·6172·6765·740a·3c2f·636f·6465·3e3c··.target.</code>< | |||
| 0003b8e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b8f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b900:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b910:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b920:·612d·7461·7267·6574·3d22·2369·646d·3931··a-target="#idm91 | |||
| 0003b930:·3838·2220·7461·6269·6e64·6578·3d22·3022··88"·tabindex="0" | |||
| 0003b940:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b950:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b960:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b970:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b980:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b990:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b9a0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b9b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b9c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b9d0:·6170·7365·2220·6964·3d22·6964·6d39·3138··apse"·id="idm918 | |||
| 0003b9e0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003b9f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ba00:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ba10:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ba20:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ba30:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003ba40:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ba50:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003ba60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ba70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003ba80:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003ba90:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003baa0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bab0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003bac0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bad0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003bae0:·616d·653a·2058·4343·4446·2056·616c·7565··ame:·XCCDF·Value | |||
| Max diff block lines reached; 8723437/8757715 bytes (99.61%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Basic | 60 | ··············Linux·9·-·Basic |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 39 lines modified | Offset 111, 33 lines modified | ||
| 111 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 111 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 112 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 113 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 113 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 115 | ············_\x8c_\x8i_\x8s······1.6.1 | 115 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 119 | var_system_crypto_policy='DEFAULT' | ||
| 120 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 121 | rc=$? | ||
| 122 | if·test·"$rc"·=·127;·then | ||
| 123 | » echo·"$stderr_of_call"·>&2 | ||
| 124 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 125 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 126 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 127 | » false··#·end·with·an·error·code | ||
| 128 | elif·test·"$rc"·!=·0;·then | ||
| 129 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 130 | » false··#·end·with·an·error·code | ||
| 131 | fi | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 123 | --- | ||
| 124 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 125 | kind:·MachineConfig | ||
| 126 | spec: | ||
| 127 | ··config: | ||
| 128 | ····ignition: | ||
| 129 | ······version:·3.1.0 | ||
| 130 | ····systemd: | ||
| 131 | ······units: | ||
| 132 | ········-·name:·configure-crypto-policy.service | ||
| 133 | ··········enabled:·true | ||
| 134 | ··········contents:·| | ||
| 135 | ············[Unit] | ||
| 136 | ············Before=kubelet.service | ||
| 137 | ············[Service] | ||
| 138 | ············Type=oneshot | ||
| 139 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 140 | ············RemainAfterExit=yes | ||
| 141 | ············[Install] | ||
| 142 | ············WantedBy=multi-user.target | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 148 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 137 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 149 | ··set_fact: | 138 | ··set_fact: |
| Offset 192, 33 lines modified | Offset 186, 39 lines modified | ||
| 192 | ··-·PCI-DSSv4-2.2.7 | 186 | ··-·PCI-DSSv4-2.2.7 |
| 193 | ··-·configure_crypto_policy | 187 | ··-·configure_crypto_policy |
| 194 | ··-·high_severity | 188 | ··-·high_severity |
| 195 | ··-·low_complexity | 189 | ··-·low_complexity |
| 196 | ··-·low_disruption | 190 | ··-·low_disruption |
| 197 | ··-·no_reboot_needed | 191 | ··-·no_reboot_needed |
| 198 | ··-·restrict_strategy | 192 | ··-·restrict_strategy |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 200 | var_system_crypto_policy='DEFAULT' | ||
| 201 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 202 | rc=$? | ||
| 203 | if·test·"$rc"·=·127;·then | ||
| 204 | » echo·"$stderr_of_call"·>&2 | ||
| 205 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 206 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 207 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 208 | » false··#·end·with·an·error·code | ||
| 209 | elif·test·"$rc"·!=·0;·then | ||
| 210 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 211 | » false··#·end·with·an·error·code | ||
| 212 | 194 | C.Co.om.mp.pl.le.ex.xi.it.ty.y:.:·low | |
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 198 | --- | ||
| 199 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 200 | kind:·MachineConfig | ||
| 201 | spec: | ||
| 202 | ··config: | ||
| 203 | ····ignition: | ||
| 204 | ······version:·3.1.0 | ||
| 205 | ····systemd: | ||
| 206 | ······units: | ||
| 207 | ········-·name:·configure-crypto-policy.service | ||
| 208 | ··········enabled:·true | ||
| 209 | ··········contents:·| | ||
| 210 | ············[Unit] | ||
| 211 | ············Before=kubelet.service | ||
| 212 | ············[Service] | ||
| 213 | ············Type=oneshot | ||
| 214 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 215 | ············RemainAfterExit=yes | ||
| 216 | ············[Install] | ||
| 217 | ············WantedBy=multi-user.target | ||
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 214 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 219 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 215 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 220 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 216 | Severity: ··medium | 221 | Severity: ··medium |
| Max diff block lines reached; 856308/862232 bytes (99.31%) of diff not shown. | |||
| Offset 14417, 15 lines modified | Offset 14417, 15 lines modified | ||
| 00038500:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038500:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038510:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038510:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038520:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038520:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038530:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038530:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038540:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038540:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038550:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038550:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038560:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038560:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038570:·7320·6f66·2032·3032·3 | 00038570:·7320·6f66·2032·3032·352d·3132·2d31·3029··s·of·2025-12-10) | ||
| 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038590:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038590:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000385a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000385a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000385b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000385b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000385c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000385c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000385d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000385d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000385e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000385e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15227, 249 lines modified | Offset 15227, 249 lines modified | ||
| 0003b7a0:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | 0003b7a0:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 0003b7b0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | 0003b7b0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | ||
| 0003b7c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b7c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b7d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b7d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b7e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b7e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b7f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b7f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b800:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b800:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b810:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b820:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b830:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b840:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b850:·7365·2220·6964·3d22·6964·6d39·3138·3722··se"·id="idm9187" | |||
| 0003b810:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | |||
| 0003b820:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 0003b830:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b840:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b850:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b860:·6d39·3138·3722·3e3c·7461·626c·6520·636c··m9187"><table·cl | |||
| 0003b870:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b880:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b890:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b8a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b8b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b8c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b8d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b8e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b8f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b900:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b910:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | |||
| 0003b920:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b930:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | |||
| 0003b940:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | |||
| 0003b | 0003b860:·3e3c·7072·653e·3c63·6f64·653e·0a76·6172··><pre><code>.var | ||
| 0003b870:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003b880:·6f6c·6963·793d·273c·6162·6272·2074·6974··olicy='<abbr·tit | |||
| 0003b890:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003b8a0:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003b8b0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003b8c0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003b8d0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003b8e0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003b8f0:·554c·543c·2f61·6262·723e·270a·0a0a·7374··ULT</abbr>'...st | |||
| 0003b900:·6465·7272·5f6f·665f·6361·6c6c·3d24·2875··derr_of_call=$(u | |||
| 0003b960:·2d2d·2d0a·6170·6956·6572·7369·6f6e·3a20··---.apiVersion:· | |||
| 0003b970:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 0003b980:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 0003b990:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 0003b9a0:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 0003b9b0:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| 0003b9c0:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | |||
| 0003b9d0:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | |||
| 0003b9e0:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | |||
| 0003b9f0:·6e69·7473·3a0a·2020·2020·2020·2020·2d20··nits:.········-· | |||
| 0003ba00:·6e61·6d65·3a20·636f·6e66·6967·7572·652d··name:·configure- | |||
| 0003ba10:·6372·7970·746f·2d70·6f6c·6963·792e·7365··crypto-policy.se | |||
| 0003ba20:·7276·6963·650a·2020·2020·2020·2020·2020··rvice.·········· | |||
| 0003ba30:·656e·6162·6c65·643a·2074·7275·650a·2020··enabled:·true.·· | |||
| 0003ba40:·2020·2020·2020·2020·636f·6e74·656e·7473··········contents | |||
| 0003ba50:·3a20·7c0a·2020·2020·2020·2020·2020·2020··:·|.············ | |||
| 0003ba60:·5b55·6e69·745d·0a20·2020·2020·2020·2020··[Unit].········· | |||
| 0003ba70:·2020·2042·6566·6f72·653d·6b75·6265·6c65·····Before=kubele | |||
| 0003ba80:·742e·7365·7276·6963·650a·2020·2020·2020··t.service.······ | |||
| 0003ba90:·2020·2020·2020·5b53·6572·7669·6365·5d0a········[Service]. | |||
| 0003baa0:·2020·2020·2020·2020·2020·2020·5479·7065··············Type | |||
| 0003bab0:·3d6f·6e65·7368·6f74·0a20·2020·2020·2020··=oneshot.······· | |||
| 0003bac0:·2020·2020·2045·7865·6353·7461·7274·3d75·······ExecStart=u | |||
| 0003b | 0003b910:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | ||
| 0003b | 0003b920:·6963·6965·7320·2d2d·7365·7420·247b·7661··icies·--set·${va | ||
| 0003baf0:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 0003bb00:·5f70·6f6c·6963·797d·7d0a·2020·2020·2020··_policy}}.······ | |||
| 0003bb10:·2020·2020·2020·5265·6d61·696e·4166·7465········RemainAfte | |||
| 0003bb20:·7245·7869·743d·7965·730a·2020·2020·2020··rExit=yes.······ | |||
| 0003bb30:·2020·2020·2020·5b49·6e73·7461·6c6c·5d0a········[Install]. | |||
| 0003bb40:·2020·2020·2020·2020·2020·2020·5761·6e74··············Want | |||
| 0003bb50:·6564·4279·3d6d·756c·7469·2d75·7365·722e··edBy=multi-user. | |||
| 0003bb60:·7461·7267·6574·0a3c·2f63·6f64·653e·3c2f··target.</code></ | |||
| 0003bb70:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bb80:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bb90:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bba0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bbb0:·2d74·6172·6765·743d·2223·6964·6d39·3138··-target="#idm918 | |||
| 0003bbc0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003bbd0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bbe0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bbf0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bc00:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bc10:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bc20:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003bc30:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bc40:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bc50:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bc60:·7073·6522·2069·643d·2269·646d·3931·3838··pse"·id="idm9188 | |||
| 0003bc70:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bc80:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bc90:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bca0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bcb0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bcc0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bcd0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bce0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bcf0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bd00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003bd10:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bd20:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003bd30:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bd40:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003bd50:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bd60:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003bd70:·6d65·3a20·5843·4344·4620·5661·6c75·6520··me:·XCCDF·Value· | |||
| 0003b | 0003b930:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | ||
| 0003bd90:·6f5f·706f·6c69·6379·2023·2070·726f·6d6f··o_policy·#·promo | |||
| Max diff block lines reached; 9965723/9999863 bytes (99.66%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Intermediate | 60 | ··············Linux·9·-·Intermediate |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 119, 39 lines modified | Offset 119, 33 lines modified | ||
| 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 123 | ············_\x8c_\x8i_\x8s······1.6.1 | 123 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 127 | var_system_crypto_policy='DEFAULT' | ||
| 128 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 129 | rc=$? | ||
| 130 | if·test·"$rc"·=·127;·then | ||
| 131 | » echo·"$stderr_of_call"·>&2 | ||
| 132 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 133 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 134 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 135 | » false··#·end·with·an·error·code | ||
| 136 | elif·test·"$rc"·!=·0;·then | ||
| 137 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 138 | » false··#·end·with·an·error·code | ||
| 139 | fi | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 156 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 145 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 157 | ··set_fact: | 146 | ··set_fact: |
| Offset 200, 33 lines modified | Offset 194, 39 lines modified | ||
| 200 | ··-·PCI-DSSv4-2.2.7 | 194 | ··-·PCI-DSSv4-2.2.7 |
| 201 | ··-·configure_crypto_policy | 195 | ··-·configure_crypto_policy |
| 202 | ··-·high_severity | 196 | ··-·high_severity |
| 203 | ··-·low_complexity | 197 | ··-·low_complexity |
| 204 | ··-·low_disruption | 198 | ··-·low_disruption |
| 205 | ··-·no_reboot_needed | 199 | ··-·no_reboot_needed |
| 206 | ··-·restrict_strategy | 200 | ··-·restrict_strategy |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 208 | var_system_crypto_policy='DEFAULT' | ||
| 209 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 210 | rc=$? | ||
| 211 | if·test·"$rc"·=·127;·then | ||
| 212 | » echo·"$stderr_of_call"·>&2 | ||
| 213 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 214 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 215 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 216 | » false··#·end·with·an·error·code | ||
| 217 | elif·test·"$rc"·!=·0;·then | ||
| 218 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | 202 | C.Co.om.mp.pl.le.ex.xi.it.ty.y:.:·low | |
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 206 | --- | ||
| 207 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 208 | kind:·MachineConfig | ||
| 209 | spec: | ||
| 210 | ··config: | ||
| 211 | ····ignition: | ||
| 212 | ······version:·3.1.0 | ||
| 213 | ····systemd: | ||
| 214 | ······units: | ||
| 215 | ········-·name:·configure-crypto-policy.service | ||
| 216 | ··········enabled:·true | ||
| 217 | ··········contents:·| | ||
| 218 | ············[Unit] | ||
| 219 | ············Before=kubelet.service | ||
| 220 | ············[Service] | ||
| 221 | ············Type=oneshot | ||
| 222 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 223 | ············RemainAfterExit=yes | ||
| 224 | ············[Install] | ||
| 225 | ············WantedBy=multi-user.target | ||
| 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 222 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 227 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 223 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 228 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 224 | Severity: ··medium | 229 | Severity: ··medium |
| Max diff block lines reached; 1052330/1058268 bytes (99.44%) of diff not shown. | |||
| Offset 14413, 15 lines modified | Offset 14413, 15 lines modified | ||
| 000384c0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 000384c0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 000384d0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 000384d0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 000384e0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 000384e0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384f0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384f0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038500:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038500:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038510:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038510:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038520:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038520:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038530:·3 | 00038530:·352d·3132·2d31·3029·0a20·2020·2020·2020··5-12-10).······· | ||
| 00038540:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038540:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038550:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038550:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038560:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038560:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038570:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038570:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038580:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038580:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038590:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038590:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 000385a0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 000385a0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15232, 235 lines modified | Offset 15232, 235 lines modified | ||
| 0003b7f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b7f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b800:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | 0003b800:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | ||
| 0003b810:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b810:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b820:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b820:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b830:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b830:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b840:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b840:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b850:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b850:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b860:·6564·6961·7469·6f6e·20 | 0003b860:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | ||
| 0003b870:· | 0003b870:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b880:· | 0003b880:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b890:· | 0003b890:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b8a0:·6 | 0003b8a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | ||
| 0003b8b0:· | 0003b8b0:·3432·3822·3e3c·7461·626c·6520·636c·6173··428"><table·clas | ||
| 0003b8c0:· | 0003b8c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b8d0:· | 0003b8d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b8e0:·6 | 0003b8e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b8f0:·6 | 0003b8f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b900:· | 0003b900:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b910:· | 0003b910:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b920:· | 0003b920:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b930:· | 0003b930:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b940:· | 0003b940:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b950:· | 0003b950:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b960:· | 0003b960:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b970:· | 0003b970:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b980:· | 0003b980:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b990:· | 0003b990:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b9a0:·6 | 0003b9a0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | ||
| 0003b9b0:·7061·636b·6167·6520·2d2d·6164·643d·6169··package·--add=ai | |||
| 0003b9c0:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003b9d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b9e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b9f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ba00:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ba10:·6765·743d·2223·6964·6d38·3432·3922·2074··get="#idm8429"·t | |||
| 0003ba20:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ba30:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ba40:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ba50:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ba60:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ba70:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003ba80:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003ba90:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003baa0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bab0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bac0:·6964·3d22·6964·6d38·3432·3922·3e3c·7461··id="idm8429"><ta | |||
| 0003bad0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003bae0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003baf0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003bb00:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b | 0003b9b0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | ||
| 0003b9c0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b9d0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b9e0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b9f0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003ba00:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003ba10:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ba20:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ba30:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ba40:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ba50:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ba60:·3d22·2369·646d·3834·3239·2220·7461·6269··="#idm8429"·tabi | |||
| 0003ba70:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ba80:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ba90:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003baa0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bab0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bac0:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003bad0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003bae0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003baf0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bb00:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bb10:·646d·3834·3239·223e·3c74·6162·6c65·2063··dm8429"><table·c | |||
| 0003bb20:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bb30:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bb40:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bb50:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bb60:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bb70:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bb80:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bb | 0003bb90:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003bb | 0003bba0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003bb | 0003bbb0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003bbc0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003bbd0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003bbe0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003bbf0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003bc00:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bc10:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003bc20:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003bc30:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003bc40:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 0003bc50:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 0003bc60:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 0003bc70:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 0003bc80:·6e76·205d·3b20·7468·656e·0a0a·6966·2021··nv·];·then..if·! | |||
| 0003bc90:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003bca0:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 0003bcb0:·2020·646e·6620·696e·7374·616c·6c20·2d79····dnf·install·-y | |||
| 0003bcc0:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 0003bcd0:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003bce0:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003bcf0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003bd00:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003bd10:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003bd20:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bd30:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bd40:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bd50:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bd60:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bd70:·3834·3330·2220·7461·6269·6e64·6578·3d22··8430"·tabindex=" | |||
| Max diff block lines reached; 24941540/24973748 bytes (99.87%) of diff not shown. | |||
| Offset 14413, 16 lines modified | Offset 14413, 16 lines modified | ||
| 000384c0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 000384c0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 000384d0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 000384d0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 000384e0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 000384e0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 000384f0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 000384f0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00038500:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00038500:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00038510:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00038510:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00038520:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038520:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038530:·2861·7320·6f66·2032·3032·3 | 00038530:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00038540:·3 | 00038540:·3029·0a20·2020·2020·2020·2020·2020·2020··0).············· | ||
| 00038550:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00038550:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00038560:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00038560:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00038570:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00038570:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00038580:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00038580:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00038590:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00038590:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 000385a0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 000385a0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 000385b0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 000385b0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15201, 235 lines modified | Offset 15201, 235 lines modified | ||
| 0003b600:·7461·7267·6574·3d22·2369·646d·3834·3238··target="#idm8428 | 0003b600:·7461·7267·6574·3d22·2369·646d·3834·3238··target="#idm8428 | ||
| 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b670:·696f·6e20· | 0003b670:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | ||
| 0003b680:· | 0003b680:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003b690:· | 0003b690:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b6a0:·6 | 0003b6a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b6b0:· | 0003b6b0:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | ||
| 0003b6c0:· | 0003b6c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b6d0:· | 0003b6d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b6e0:· | 0003b6e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b6f0:· | 0003b6f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b700:· | 0003b700:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003b710:· | 0003b710:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b720:· | 0003b720:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b730:· | 0003b730:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b740:· | 0003b740:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b750:· | 0003b750:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b760:·6 | 0003b760:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b770:·6 | 0003b770:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b780:· | 0003b780:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b790:· | 0003b790:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b7a0:· | 0003b7a0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b7b0:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003b7c0:·6765·202d·2d61·6464·3d61·6964·650a·3c2f··ge·--add=aide.</ | |||
| 0003b7d0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b7e0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b7f0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b800:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b810:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b820:·2369·646d·3834·3239·2220·7461·6269·6e64··#idm8429"·tabind | |||
| 0003b830:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b840:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b850:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b860:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b870:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b880:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b890:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b8a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b8b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b8c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b8d0:·646d·3834·3239·223e·3c74·6162·6c65·2063··dm8429"><table·c | |||
| 0003b8e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b8f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b900:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b910:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b920:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b930:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b940:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b | 0003b7b0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | ||
| 0003b7c0:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b7d0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b7e0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b7f0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b800:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b810:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b820:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b830:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b840:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b850:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b860:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b870:·6d38·3432·3922·2074·6162·696e·6465·783d··m8429"·tabindex= | |||
| 0003b880:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b890:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b8a0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b8b0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b8c0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b8d0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b8e0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b8f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b900:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b910:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003b920:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b930:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b940:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b950:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b960:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b970:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b9 | 0003b980:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b990:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b970:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b980:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b990:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b9a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b9b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b9c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b9d0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b9e0:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b9f0:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003ba00:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003ba10:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003ba20:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003ba30:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003ba40:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003ba50:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003ba60:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ba70:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ba80:·6765·743d·2223·6964·6d38·3433·3022·2074··get="#idm8430"·t | |||
| 0003ba90:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003baa0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bab0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bac0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bad0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bae0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003baf0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003bb00:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| Max diff block lines reached; 10567742/10600088 bytes (99.69%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 33 lines modified | Offset 122, 41 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8c_\x8i_\x8s············6.1.1 | 126 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package·--add=aide | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | include·install_aide | 134 | include·install_aide |
| 141 | class·install_aide·{ | 135 | class·install_aide·{ |
| 142 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 143 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 144 | ··} | 138 | ··} |
| 145 | } | 139 | } |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 147 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 148 | ····dnf·install·-y·"aide" | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | -·name:·Ensure·aide·is·installed | 158 | -·name:·Ensure·aide·is·installed |
| 152 | ··package: | 159 | ··package: |
| Offset 168, 36 lines modified | Offset 176, 28 lines modified | ||
| 168 | ··-·no_reboot_needed | 176 | ··-·no_reboot_needed |
| 169 | ··-·package_aide_installed | 177 | ··-·package_aide_installed |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | [[packages]] | 179 | [[packages]] |
| 172 | name·=·"aide" | 180 | name·=·"aide" |
| 173 | version·=·"*" | 181 | version·=·"*" |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 181 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 182 | ····dnf·install·-y·"aide" | ||
| 183 | fi | ||
| 187 | package·install·aide | ||
| 184 | else | ||
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 186 | fi | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | package· | 193 | package·--add=aide |
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 198 | To·initiate·a·manual·check,·run·the·following·command: | 199 | To·initiate·a·manual·check,·run·the·following·command: |
| 199 | $·sudo·/usr/sbin/aide·--check | 200 | $·sudo·/usr/sbin/aide·--check |
| Offset 215, 14 lines modified | Offset 215, 28 lines modified | ||
| 215 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 215 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 216 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 216 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 217 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 217 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 218 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 218 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 219 | ············_\x8c_\x8i_\x8s············6.1.1 | 219 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 221 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 221 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 223 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 224 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 225 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 226 | ····dnf·install·-y·"aide" | ||
| 227 | fi | ||
| 228 | /usr/sbin/aide·--init | ||
| 229 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 230 | else | ||
| 231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 232 | fi | ||
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1304141/1310105 bytes (99.54%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038540:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00038550:·313 | 00038550:·3132·2d31·3029·0a20·2020·2020·2020·2020··12-10).········· | ||
| 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15192, 235 lines modified | Offset 15192, 235 lines modified | ||
| 0003b570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b580:·646d·3834·3238·2220·7461·6269·6e64·6578··dm8428"·tabindex | 0003b580:·646d·3834·3238·2220·7461·6269·6e64·6578··dm8428"·tabindex | ||
| 0003b590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b5e0:·6d65·6469·6174·696f·6e20· | 0003b5e0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003b5f0:· | 0003b5f0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b600:· | 0003b600:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b610:· | 0003b610:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b620:· | 0003b620:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b630:· | 0003b630:·3834·3238·223e·3c74·6162·6c65·2063·6c61··8428"><table·cla | ||
| 0003b640:· | 0003b640:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b650:· | 0003b650:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b660:· | 0003b660:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b670:·6 | 0003b670:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b680:· | 0003b680:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b690:· | 0003b690:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b6a0:· | 0003b6a0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b6b0:· | 0003b6b0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b6c0:· | 0003b6c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b6d0:· | 0003b6d0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b6e0:· | 0003b6e0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b6f0:· | 0003b6f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b700:· | 0003b700:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003b710:·6 | 0003b710:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003b720:·6 | 0003b720:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | ||
| 0003b730:·0a70·6163·6b61·6765·202d·2d61·6464·3d61··.package·--add=a | |||
| 0003b740:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | |||
| 0003b750:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b760:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b770:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b780:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b790:·7267·6574·3d22·2369·646d·3834·3239·2220··rget="#idm8429"· | |||
| 0003b7a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b7b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b7c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b7d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b7e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b7f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b800:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b810:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b820:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b830:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b840:·2069·643d·2269·646d·3834·3239·223e·3c74···id="idm8429"><t | |||
| 0003b850:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b860:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b870:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b880:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b890:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b8a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b8b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003b730:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | ||
| 0003b740:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b750:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b760:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b770:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b780:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b790:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b7a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b7b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b7c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b7d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b7e0:·743d·2223·6964·6d38·3432·3922·2074·6162··t="#idm8429"·tab | |||
| 0003b7f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b800:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b810:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b820:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b830:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b840:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003b850:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003b860:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b870:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b880:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b890:·6964·6d38·3432·3922·3e3c·7461·626c·6520··idm8429"><table· | |||
| 0003b8a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b8b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b8c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b8d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b8e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b8 | 0003b8f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b8e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b900:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b910:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b9 | 0003b920:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b910:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b920:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b930:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b940:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b950:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b960:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b970:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b980:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b990:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b9 | 0003b930:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b940:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b950:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b960:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b970:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b980:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b990:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003b9a0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003b9b0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003b9c0:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003b9d0:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003b9e0:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003b9f0:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003ba00:·656e·7620·5d3b·2074·6865·6e0a·0a69·6620··env·];·then..if· | |||
| 0003ba10:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| Max diff block lines reached; 10205449/10237795 bytes (99.68%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Workstation | 60 | ··············Workstation |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 33 lines modified | Offset 121, 41 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package·--add=aide | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | include·install_aide | 133 | include·install_aide |
| 140 | class·install_aide·{ | 134 | class·install_aide·{ |
| 141 | ··package·{·'aide': | 135 | ··package·{·'aide': |
| 142 | ····ensure·=>·'installed', | 136 | ····ensure·=>·'installed', |
| 143 | ··} | 137 | ··} |
| 144 | } | 138 | } |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 145 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 146 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 147 | ····dnf·install·-y·"aide" | ||
| 148 | fi | ||
| 149 | else | ||
| 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 151 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | -·name:·Ensure·aide·is·installed | 157 | -·name:·Ensure·aide·is·installed |
| 151 | ··package: | 158 | ··package: |
| Offset 167, 36 lines modified | Offset 175, 28 lines modified | ||
| 167 | ··-·no_reboot_needed | 175 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 176 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | [[packages]] | 178 | [[packages]] |
| 171 | name·=·"aide" | 179 | name·=·"aide" |
| 172 | version·=·"*" | 180 | version·=·"*" |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 180 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 181 | ····dnf·install·-y·"aide" | ||
| 182 | fi | ||
| 186 | package·install·aide | ||
| 183 | else | ||
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 185 | fi | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | package· | 192 | package·--add=aide |
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 195 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 197 | To·initiate·a·manual·check,·run·the·following·command: | 198 | To·initiate·a·manual·check,·run·the·following·command: |
| 198 | $·sudo·/usr/sbin/aide·--check | 199 | $·sudo·/usr/sbin/aide·--check |
| Offset 214, 14 lines modified | Offset 214, 28 lines modified | ||
| 214 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 214 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 216 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 216 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 217 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 217 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 218 | ············_\x8c_\x8i_\x8s············6.1.1 | 218 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 219 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 219 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 222 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 223 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 224 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 225 | ····dnf·install·-y·"aide" | ||
| 226 | fi | ||
| 227 | /usr/sbin/aide·--init | ||
| 228 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 229 | else | ||
| 230 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 231 | fi | ||
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 222 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 233 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 223 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 234 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1262120/1268015 bytes (99.54%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038540:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00038550:·313 | 00038550:·3132·2d31·3029·0a20·2020·2020·2020·2020··12-10).········· | ||
| 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15224, 235 lines modified | Offset 15224, 235 lines modified | ||
| 0003b770:·6172·6765·743d·2223·6964·6d38·3432·3822··arget="#idm8428" | 0003b770:·6172·6765·743d·2223·6964·6d38·3432·3822··arget="#idm8428" | ||
| 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b7e0:·6f6e·20 | 0003b7e0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | ||
| 0003b7f0:·7 | 0003b7f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b800:· | 0003b800:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b810:· | 0003b810:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b820:· | 0003b820:·2220·6964·3d22·6964·6d38·3432·3822·3e3c··"·id="idm8428">< | ||
| 0003b830:· | 0003b830:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b840:·6 | 0003b840:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b850:· | 0003b850:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b860:· | 0003b860:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b870:· | 0003b870:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b880:·6 | 0003b880:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b890:· | 0003b890:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b8a0:· | 0003b8a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b8b0:· | 0003b8b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b8c0:· | 0003b8c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b8d0:· | 0003b8d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b8e0:· | 0003b8e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b8f0:· | 0003b8f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b900:· | 0003b900:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003b910:· | 0003b910:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b920:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003b930:·6520·2d2d·6164·643d·6169·6465·0a3c·2f63··e·--add=aide.</c | |||
| 0003b940:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b950:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b960:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b970:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b980:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b990:·6964·6d38·3432·3922·2074·6162·696e·6465··idm8429"·tabinde | |||
| 0003b9a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b9b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b9c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b9d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b9e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b9f0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003ba00:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003ba10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ba20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ba30:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ba40:·6d38·3432·3922·3e3c·7461·626c·6520·636c··m8429"><table·cl | |||
| 0003ba50:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ba60:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ba70:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ba80:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ba90:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003baa0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003b920:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | ||
| 0003b930:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b940:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b950:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b960:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b970:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b980:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b990:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b9a0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b9b0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b9c0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b9d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b9e0:·3834·3239·2220·7461·6269·6e64·6578·3d22··8429"·tabindex=" | |||
| 0003b9f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ba00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ba10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ba20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ba30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ba40:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003ba50:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003ba60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ba70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ba80:·7073·6522·2069·643d·2269·646d·3834·3239··pse"·id="idm8429 | |||
| 0003ba90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003baa0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bab0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bac0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bad0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ba | 0003bae0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003ba | 0003baf0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003bae0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b | 0003bb00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003bb10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bb | 0003bb20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003bb | 0003bb30:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003bb20:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003bb30:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003bb40:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003bb50:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003bb60:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003bb70:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003bb80:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003bb | 0003bb40:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003bb50:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bb60:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003bb70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003bb80:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003bb90:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003bba0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003bbb0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003bbc0:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003bbd0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003bbe0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003bbf0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003bc00:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003bc10:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003bc20:·203b·2074·6865·6e0a·2020·2020·646e·6620···;·then.····dnf· | |||
| 0003bc30:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| Max diff block lines reached; 24758029/24790375 bytes (99.87%) of diff not shown. | |||
| Offset 14449, 15 lines modified | Offset 14449, 15 lines modified | ||
| 00038700:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038700:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038710:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038710:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038720:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038720:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038730:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038730:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038740:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038740:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038750:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038750:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038760:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038760:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00038770:·3032·3 | 00038770:·3032·352d·3132·2d31·3029·0a20·2020·2020··025-12-10).····· | ||
| 00038780:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00038780:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00038790:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00038790:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000387a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000387a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000387b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000387b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000387c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000387c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000387d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000387d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000387e0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 000387e0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15177, 196 lines modified | Offset 15177, 196 lines modified | ||
| 0003b480:·6765·743d·2223·6964·6d38·3933·3122·2074··get="#idm8931"·t | 0003b480:·6765·743d·2223·6964·6d38·3933·3122·2074··get="#idm8931"·t | ||
| 0003b490:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b490:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b4a0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b4a0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b4b0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b4b0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b4c0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b4c0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b4d0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b4d0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b4e0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b4e0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b4f0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b500:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b510:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b520:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b530:·3d22·6964·6d38·3933·3122·3e3c·7072·653e··="idm8931"><pre> | |||
| 0003b540:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003b550:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b560:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b570:·6e20·706c·6174·666f·726d·730a·6966·2028··n·platforms.if·( | |||
| 0003b580:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b590:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b5a0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b5b0:·6e74·6169·6e65·7265·6e76·205d·2026·616d··ntainerenv·]·&am | |||
| 0003b5c0:·703b·2661·6d70·3b20·2120·2820·5b20·2224··p;&·!·(·[·"$ | |||
| 0003b4f0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b500:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b510:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b520:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b530:·2069·643d·2269·646d·3839·3331·223e·3c74···id="idm8931"><t | |||
| 0003b540:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b550:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b560:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b570:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b580:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b590:·7479·3a3c·2f74·683e·3c74·643e·6d65·6469··ty:</th><td>medi | |||
| 0003b5a0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | |||
| 0003b5b0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b5c0:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | |||
| 0003b5d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b5e0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b5f0:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | |||
| 0003b600:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b610:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003b620:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b630:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b640:·616d·653a·2043·6865·636b·2074·6f20·7365··ame:·Check·to·se | |||
| 0003b650:·6520·7468·6520·6375·7272·656e·7420·7374··e·the·current·st | |||
| 0003b660:·6174·7573·206f·6620·4649·5053·206d·6f64··atus·of·FIPS·mod | |||
| 0003b670:·650a·2020·636f·6d6d·616e·643a·202f·7573··e.··command:·/us | |||
| 0003b680:·722f·6269·6e2f·6669·7073·2d6d·6f64·652d··r/bin/fips-mode- | |||
| 0003b690:·7365·7475·7020·2d2d·6368·6563·6b0a·2020··setup·--check.·· | |||
| 0003b6a0:·7265·6769·7374·6572·3a20·6973·5f66·6970··register:·is_fip | |||
| 0003b6b0:·735f·656e·6162·6c65·640a·2020·6368·616e··s_enabled.··chan | |||
| 0003b6c0:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | |||
| 0003b6d0:·2020·6661·696c·6564·5f77·6865·6e3a·2066····failed_when:·f | |||
| 0003b6e0:·616c·7365·0a20·2077·6865·6e3a·2028·2061··alse.··when:·(·a | |||
| 0003b6f0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b700:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b710:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b720:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b730:·6f64·6d61·6e22·2c0a·2020·2020·2263·6f6e··odman",.····"con | |||
| 0003b740:·7461·696e·6572·225d·2061·6e64·206e·6f74··tainer"]·and·not | |||
| 0003b750:·2028·206c·6f6f·6b75·7028·2265·6e76·222c···(·lookup("env", | |||
| 0003b760:·2022·636f·6e74·6169·6e65·7222·2920·3d3d···"container")·== | |||
| 0003b770:·2022·6277·7261·702d·6f73·6275·696c·6422···"bwrap-osbuild" | |||
| 0003b780:·2029·2029·0a20·2074·6167·733a·0a20·202d···)·).··tags:.··- | |||
| 0003b790:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003b7a0:·3039·2d36·3731·3031·300a·2020·2d20·4e49··09-671010.··-·NI | |||
| 0003b7b0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b7c0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b7d0:·332d·4941·2d37·0a20·202d·204e·4953·542d··3-IA-7.··-·NIST- | |||
| 0003b7e0:·3830·302d·3533·2d53·432d·3132·0a20·202d··800-53-SC-12.··- | |||
| 0003b7f0:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003b800:·3132·2832·290a·2020·2d20·4e49·5354·2d38··12(2).··-·NIST-8 | |||
| 0003b810:·3030·2d35·332d·5343·2d31·3228·3329·0a20··00-53-SC-12(3).· | |||
| 0003b820:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b830:·432d·3133·0a20·202d·2065·6e61·626c·655f··C-13.··-·enable_ | |||
| 0003b840:·6472·6163·7574·5f66·6970·735f·6d6f·6475··dracut_fips_modu | |||
| 0003b850:·6c65·0a20·202d·2068·6967·685f·7365·7665··le.··-·high_seve | |||
| 0003b860:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | |||
| 0003b870:·636f·6d70·6c65·7869·7479·0a20·202d·206d··complexity.··-·m | |||
| 0003b880:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | |||
| 0003b890:·0a20·202d·2072·6562·6f6f·745f·7265·7175··.··-·reboot_requ | |||
| 0003b8a0:·6972·6564·0a20·202d·2072·6573·7472·6963··ired.··-·restric | |||
| 0003b8b0:·745f·7374·7261·7465·6779·0a0a·2d20·6e61··t_strategy..-·na | |||
| 0003b8c0:·6d65·3a20·456e·6162·6c65·2046·4950·5320··me:·Enable·FIPS· | |||
| 0003b8d0:·6d6f·6465·0a20·2063·6f6d·6d61·6e64·3a20··mode.··command:· | |||
| 0003b8e0:·2f75·7372·2f62·696e·2f66·6970·732d·6d6f··/usr/bin/fips-mo | |||
| 0003b8f0:·6465·2d73·6574·7570·202d·2d65·6e61·626c··de-setup·--enabl | |||
| 0003b900:·650a·2020·7768·656e·3a0a·2020·2d20·2820··e.··when:.··-·(· | |||
| 0003b910:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b920:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b930:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b940:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b950:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b960:·6e65·7222·5d0a·2020·2020·616e·6420·6e6f··ner"].····and·no | |||
| 0003b970:·7420·2820·6c6f·6f6b·7570·2822·656e·7622··t·(·lookup("env" | |||
| 0003b | 0003b5d0:·7b63·6f6e·7461·696e·6572·3a2d·7d22·203d··{container:-}"·= | ||
| 0003b | 0003b5e0:·3d20·2262·7772·6170·2d6f·7362·7569·6c64··=·"bwrap-osbuild | ||
| 0003b5f0:·2220·5d20·2920·293b·2074·6865·6e0a·0a66··"·]·)·);·then..f | |||
| 0003b600:·6970·732d·6d6f·6465·2d73·6574·7570·202d··ips-mode-setup·- | |||
| 0003b610:·2d65·6e61·626c·650a·4649·5053·5f43·4f4e··-enable.FIPS_CON | |||
| 0003b620:·463d·222f·6574·632f·6472·6163·7574·2e63··F="/etc/dracut.c | |||
| 0003b630:·6f6e·662e·642f·3430·2d66·6970·732e·636f··onf.d/40-fips.co | |||
| 0003b640:·6e66·220a·6966·2021·2067·7265·7020·225e··nf".if·!·grep·"^ | |||
| 0003b9a0:·2220·2920·290a·2020·2d20·6973·5f66·6970··"·)·).··-·is_fip | |||
| 0003b9b0:·735f·656e·6162·6c65·642e·7374·646f·7574··s_enabled.stdout | |||
| 0003b9c0:·2e66·696e·6428·2746·4950·5320·6d6f·6465··.find('FIPS·mode | |||
| 0003b9d0:·2069·7320·656e·6162·6c65·642e·2729·203d···is·enabled.')·= | |||
| 0003b9e0:·3d20·2d31·0a20·2074·6167·733a·0a20·202d··=·-1.··tags:.··- | |||
| 0003b9f0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003ba00:·3039·2d36·3731·3031·300a·2020·2d20·4e49··09-671010.··-·NI | |||
| 0003ba10:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003ba20:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| Max diff block lines reached; 6175590/6202416 bytes (99.57%) of diff not shown. | |||
| Offset 68, 15 lines modified | Offset 68, 15 lines modified | ||
| 68 | ··············Systems·and·Organizations·(NIST·800-171) | 68 | ··············Systems·and·Organizations·(NIST·800-171) |
| 69 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 69 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 70 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 70 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:9 | 71 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 72 | ····*·cpe:/o:centos:centos:9 | 72 | ····*·cpe:/o:centos:centos:9 |
| 73 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 73 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 74 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 74 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 75 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 75 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 76 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 77 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 78 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 79 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 79 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 80 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 80 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 81 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 81 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 82 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 82 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 117, 14 lines modified | Offset 117, 27 lines modified | ||
| 117 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 117 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 118 | ············_\x8i_\x8s_\x8m······1446 | 118 | ············_\x8i_\x8s_\x8m······1446 |
| 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 120 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 120 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 121 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 121 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 125 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 126 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 127 | fips-mode-setup·--enable | ||
| 128 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 129 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 130 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 131 | fi | ||
| 132 | else | ||
| 133 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 134 | fi | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 129 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 140 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 130 | ··command:·/usr/bin/fips-mode-setup·--check | 141 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 185, 27 lines modified | Offset 198, 14 lines modified | ||
| 185 | ··-·NIST-800-53-SC-13 | 198 | ··-·NIST-800-53-SC-13 |
| 186 | ··-·enable_dracut_fips_module | 199 | ··-·enable_dracut_fips_module |
| 187 | ··-·high_severity | 200 | ··-·high_severity |
| 188 | ··-·medium_complexity | 201 | ··-·medium_complexity |
| 189 | ··-·medium_disruption | 202 | ··-·medium_disruption |
| 190 | ··-·reboot_required | 203 | ··-·reboot_required |
| 191 | ··-·restrict_strategy | 204 | ··-·restrict_strategy |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 195 | fips-mode-setup·--enable | ||
| 196 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 197 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 198 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 199 | fi | ||
| 200 | else | ||
| 201 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 202 | fi | ||
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | To·enable·FIPS·mode,·run·the·following·command: | 206 | To·enable·FIPS·mode,·run·the·following·command: |
| 205 | fips-mode-setup·--enable | 207 | fips-mode-setup·--enable |
| 206 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 208 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 207 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 209 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 208 | ····*·Creating·/etc/system-fips | 210 | ····*·Creating·/etc/system-fips |
| Offset 219, 14 lines modified | Offset 219, 41 lines modified | ||
| 219 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 219 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 220 | ············_\x8i_\x8s_\x8m······1446 | 220 | ············_\x8i_\x8s_\x8m······1446 |
| 221 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 221 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 222 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 222 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 223 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 223 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 227 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 228 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 229 | var_system_crypto_policy='FIPS' | ||
| 230 | fips-mode-setup·--enable | ||
| 231 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 232 | rc=$? | ||
| 233 | if·test·"$rc"·=·127;·then | ||
| 234 | » echo·"$stderr_of_call"·>&2 | ||
| 235 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 236 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 237 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 238 | » false··#·end·with·an·error·code | ||
| 239 | elif·test·"$rc"·!=·0;·then | ||
| 240 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 241 | » false··#·end·with·an·error·code | ||
| 242 | fi | ||
| 243 | else | ||
| 244 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 245 | fi | ||
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 247 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 248 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 249 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 250 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 231 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 251 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 232 | ··set_fact: | 252 | ··set_fact: |
| Offset 330, 41 lines modified | Offset 357, 14 lines modified | ||
| 330 | ··-·medium_disruption | 357 | ··-·medium_disruption |
| 331 | ··-·reboot_required | 358 | ··-·reboot_required |
| 332 | ··-·restrict_strategy | 359 | ··-·restrict_strategy |
| 333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 334 | [customizations] | 361 | [customizations] |
| 335 | fips·=·true | 362 | fips·=·true |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 337 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 338 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 339 | var_system_crypto_policy='FIPS' | ||
| Max diff block lines reached; 869728/876469 bytes (99.23%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 000384d0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 000384e0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 000384e0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 000384f0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 000384f0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038500:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038500:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038510:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038510:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038520:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038520:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2028·6173·206f·6620·3230·323 | 00038540:·2020·2028·6173·206f·6620·3230·3235·2d31·····(as·of·2025-1 | ||
| 00038550:·3 | 00038550:·322d·3130·290a·2020·2020·2020·2020·2020··2-10).·········· | ||
| 00038560:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00038560:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00038570:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00038570:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00038580:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00038580:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00038590:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00038590:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 000385a0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 000385a0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 000385b0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 000385b0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 000385c0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 000385c0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15267, 301 lines modified | Offset 15267, 301 lines modified | ||
| 0003ba20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ba20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ba30:·2223·6964·6d38·3038·3822·2074·6162·696e··"#idm8088"·tabin | 0003ba30:·2223·6964·6d38·3038·3822·2074·6162·696e··"#idm8088"·tabin | ||
| 0003ba40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ba40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ba50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ba50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ba60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ba60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ba70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ba70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ba80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ba80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ba90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003baa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003bab0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bac0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bad0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bae0:·6d38·3038·3822·3e3c·7072·653e·3c63·6f64··m8088"><pre><cod | |||
| 0003baf0:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003bb00:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003bb10:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003bb20:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003bb30:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003bb40:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003bb50:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003bb60:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003bb70:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003bb80:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003bb90:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003bba0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003bbb0:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003bbc0:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003bbd0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003bbe0:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003bbf0:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003bc00:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003bc10:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003bc20:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003bc30:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003bc40:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003bc50:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003bc60:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003bc70:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003bc80:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003bc90:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003bca0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003bcb0:·2027·2922·0a0a·2020·2020·0a20·2020·2064···')"..····.····d | |||
| 0003bcc0:·6e66·2072·6569·6e73·7461·6c6c·202d·7920··nf·reinstall·-y· | |||
| 0003bcd0:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003bce0:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003bcf0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bd00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bd10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bd20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bd30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bd40:·2223·6964·6d38·3038·3922·2074·6162·696e··"#idm8089"·tabin | |||
| 0003bd50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bd60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bd70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bd80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bd90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003bda0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b | 0003bdb0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b | 0003bdc0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003bdd0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003bde0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003bdf0:·2269·646d·3830·3839·223e·3c74·6162·6c65··"idm8089"><table | ||
| 0003b | 0003be00:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003be10:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003be20:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003be30:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003be40:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003be50:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003be60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003be70:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003be80:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003be90:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003bea0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003beb0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bec0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003bed0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003bee0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003bef0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003bf00:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003bf10:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003bf20:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003bf30:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003bf40:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003bf50:·696e·7374·616c·6c5f·636d·643a·2064·6e66··install_cmd:·dnf | ||
| 0003b | 0003bf60:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003bf70:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003bf80:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003bf90:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003bfa0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003bfb0:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003bfc0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b | 0003bfd0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003bfe0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003bff0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003 | 0003c000:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003 | 0003c010:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003 | 0003c020:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003 | 0003c030:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003 | 0003c040:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003 | 0003c050:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003 | 0003c060:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003 | 0003c070:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003 | 0003c080:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003 | 0003c090:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003 | 0003c0a0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003 | 0003c0b0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003 | 0003c0c0:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003 | 0003c0d0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003 | 0003c0e0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003 | 0003c0f0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| Max diff block lines reached; 6496703/6522425 bytes (99.61%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 121, 14 lines modified | Offset 121, 27 lines modified | ||
| 121 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 130 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 131 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 132 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 133 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 134 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 135 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 141 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 134 | ··set_fact: | 142 | ··set_fact: |
| Offset 255, 27 lines modified | Offset 268, 14 lines modified | ||
| 255 | ··-·PCI-DSSv4-11.5.2 | 268 | ··-·PCI-DSSv4-11.5.2 |
| 256 | ··-·high_complexity | 269 | ··-·high_complexity |
| 257 | ··-·high_severity | 270 | ··-·high_severity |
| 258 | ··-·medium_disruption | 271 | ··-·medium_disruption |
| 259 | ··-·no_reboot_needed | 272 | ··-·no_reboot_needed |
| 260 | ··-·restrict_strategy | 273 | ··-·restrict_strategy |
| 261 | ··-·rpm_verify_hashes | 274 | ··-·rpm_verify_hashes |
| 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 263 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 264 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 265 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 266 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 267 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 268 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 269 | fi | ||
| 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 275 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 271 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 276 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 272 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 277 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 273 | run·the·following·command·to·determine·which·package·owns·it: | 278 | run·the·following·command·to·determine·which·package·owns·it: |
| 274 | $·rpm·-qf·FILENAME | 279 | $·rpm·-qf·FILENAME |
| 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 280 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 276 | $·sudo·rpm·--setugids·PACKAGENAME | 281 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 294, 14 lines modified | Offset 294, 40 lines modified | ||
| 294 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 294 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 295 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 295 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 296 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 296 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 297 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 297 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 298 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 298 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 299 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 299 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 300 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 300 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 306 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 307 | declare·-A·SETPERMS_RPM_DICT | ||
| 308 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 309 | #·is·expected·by·the·RPM·database | ||
| 310 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 311 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 312 | do | ||
| 313 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 314 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 315 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 316 | done | ||
| 317 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 318 | #·correct·values | ||
| 319 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 320 | do | ||
| 321 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 322 | done | ||
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 306 | -·name:·Read·list·of·files·with·incorrect·ownership | 328 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 329 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 376, 40 lines modified | Offset 402, 14 lines modified | ||
| 376 | ··-·PCI-DSSv4-11.5.2 | 402 | ··-·PCI-DSSv4-11.5.2 |
| 377 | ··-·high_complexity | 403 | ··-·high_complexity |
| 378 | ··-·high_severity | 404 | ··-·high_severity |
| 379 | ··-·medium_disruption | 405 | ··-·medium_disruption |
| 380 | ··-·no_reboot_needed | 406 | ··-·no_reboot_needed |
| 381 | ··-·restrict_strategy | 407 | ··-·restrict_strategy |
| 382 | ··-·rpm_verify_ownership | 408 | ··-·rpm_verify_ownership |
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 384 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 385 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 386 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 387 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 388 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 711681/719514 bytes (98.91%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038610:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038620:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038620:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038630:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038630:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038640:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038640:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038650:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038650:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038660:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038660:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038670:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038670:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038680:·6173·206f·6620·3230·323 | 00038680:·6173·206f·6620·3230·3235·2d31·322d·3130··as·of·2025-12-10 | ||
| 00038690:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038690:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 000386a0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 000386a0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000386b0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000386b0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000386c0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000386c0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000386d0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000386d0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000386e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000386e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000386f0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000386f0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15288, 301 lines modified | Offset 15288, 301 lines modified | ||
| 0003bb70:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003bb70:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003bb80:·2223·6964·6d38·3038·3822·2074·6162·696e··"#idm8088"·tabin | 0003bb80:·2223·6964·6d38·3038·3822·2074·6162·696e··"#idm8088"·tabin | ||
| 0003bb90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003bb90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003bba0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003bba0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003bbb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003bbb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003bbc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003bbc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003bbd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003bbd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003bbe0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003bbf0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003bc00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bc10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bc20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bc30:·6d38·3038·3822·3e3c·7072·653e·3c63·6f64··m8088"><pre><cod | |||
| 0003bc40:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003bc50:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003bc60:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003bc70:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003bc80:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003bc90:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003bca0:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003bcb0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003bcc0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003bcd0:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003bce0:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003bcf0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003bd00:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003bd10:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003bd20:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003bd30:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003bd40:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003bd50:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003bd60:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003bd70:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003bd80:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003bd90:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003bda0:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003bdb0:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003bdc0:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003bdd0:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003bde0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003bdf0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003be00:·2027·2922·0a0a·2020·2020·0a20·2020·2064···')"..····.····d | |||
| 0003be10:·6e66·2072·6569·6e73·7461·6c6c·202d·7920··nf·reinstall·-y· | |||
| 0003be20:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003be30:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003be40:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003be50:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003be60:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003be70:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003be80:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003be90:·2223·6964·6d38·3038·3922·2074·6162·696e··"#idm8089"·tabin | |||
| 0003bea0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003beb0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bec0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bed0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bee0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003bef0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b | 0003bf00:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b | 0003bf10:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003bf20:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003bf30:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003bf40:·2269·646d·3830·3839·223e·3c74·6162·6c65··"idm8089"><table | ||
| 0003b | 0003bf50:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003bf60:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003bf70:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003bf80:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003bf90:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003bfa0:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003bfb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003bfc0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003bfd0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003bfe0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003bff0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003 | 0003c000:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 0003c010:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003 | 0003c020:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003 | 0003c030:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003 | 0003c040:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003 | 0003c050:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003 | 0003c060:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003 | 0003c070:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003 | 0003c080:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003 | 0003c090:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003 | 0003c0a0:·696e·7374·616c·6c5f·636d·643a·2064·6e66··install_cmd:·dnf | ||
| 0003 | 0003c0b0:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003 | 0003c0c0:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003 | 0003c0d0:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003 | 0003c0e0:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003 | 0003c0f0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003 | 0003c100:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003 | 0003c110:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003 | 0003c120:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003 | 0003c130:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003 | 0003c140:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003 | 0003c150:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003 | 0003c160:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003 | 0003c170:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003 | 0003c180:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003 | 0003c190:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003 | 0003c1a0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003 | 0003c1b0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003 | 0003c1c0:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003 | 0003c1d0:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003 | 0003c1e0:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003 | 0003c1f0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003 | 0003c200:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003 | 0003c210:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003 | 0003c220:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003 | 0003c230:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003 | 0003c240:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003 | 0003c250:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| Max diff block lines reached; 17041909/17067493 bytes (99.85%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:9 | 67 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 68 | ····*·cpe:/o:centos:centos:9 | 68 | ····*·cpe:/o:centos:centos:9 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 126, 14 lines modified | Offset 126, 27 lines modified | ||
| 126 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 126 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 127 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 127 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 128 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 128 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 129 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 129 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 131 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 131 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 135 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 136 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 137 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 138 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 139 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 140 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 138 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 146 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 139 | ··set_fact: | 147 | ··set_fact: |
| Offset 260, 27 lines modified | Offset 273, 14 lines modified | ||
| 260 | ··-·PCI-DSSv4-11.5.2 | 273 | ··-·PCI-DSSv4-11.5.2 |
| 261 | ··-·high_complexity | 274 | ··-·high_complexity |
| 262 | ··-·high_severity | 275 | ··-·high_severity |
| 263 | ··-·medium_disruption | 276 | ··-·medium_disruption |
| 264 | ··-·no_reboot_needed | 277 | ··-·no_reboot_needed |
| 265 | ··-·restrict_strategy | 278 | ··-·restrict_strategy |
| 266 | ··-·rpm_verify_hashes | 279 | ··-·rpm_verify_hashes |
| 267 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 268 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 269 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 270 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 271 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 272 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 273 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 274 | fi | ||
| 275 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 280 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 276 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 281 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 277 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 282 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 278 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 283 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 279 | $·rpm·-qf·FILENAME | 284 | $·rpm·-qf·FILENAME |
| 280 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 285 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 301, 14 lines modified | Offset 301, 44 lines modified | ||
| 301 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 301 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 302 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 302 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 303 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 303 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 304 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 304 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 305 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 305 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 313 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 314 | declare·-A·SETPERMS_RPM_DICT | ||
| 315 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 316 | #·is·expected·by·the·RPM·database | ||
| 317 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 318 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 319 | do | ||
| 320 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 321 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 322 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 323 | ········do | ||
| 324 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 325 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 326 | ········done | ||
| 327 | done | ||
| 328 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 329 | #·correct·values | ||
| 330 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 331 | do | ||
| 332 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 333 | done | ||
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 313 | -·name:·Read·list·of·files·with·incorrect·permissions | 339 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 314 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 340 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 386, 44 lines modified | Offset 416, 14 lines modified | ||
| 386 | ··-·PCI-DSSv4-11.5.2 | 416 | ··-·PCI-DSSv4-11.5.2 |
| 387 | ··-·high_complexity | 417 | ··-·high_complexity |
| 388 | ··-·high_severity | 418 | ··-·high_severity |
| 389 | ··-·medium_disruption | 419 | ··-·medium_disruption |
| 390 | ··-·no_reboot_needed | 420 | ··-·no_reboot_needed |
| 391 | ··-·restrict_strategy | 421 | ··-·restrict_strategy |
| 392 | ··-·rpm_verify_permissions | 422 | ··-·rpm_verify_permissions |
| 393 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 394 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 395 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1264070/1272294 bytes (99.35%) of diff not shown. | |||
| Offset 14427, 15 lines modified | Offset 14427, 15 lines modified | ||
| 000385a0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000385a0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000385b0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000385b0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000385c0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000385c0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000385d0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000385d0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 000385e0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 000385e0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 000385f0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 000385f0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038600:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038600:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038610:·6173·206f·6620·3230·323 | 00038610:·6173·206f·6620·3230·3235·2d31·322d·3130··as·of·2025-12-10 | ||
| 00038620:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038620:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038630:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038630:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038640:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038640:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038650:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038650:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038660:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038660:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038670:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038670:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038680:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038680:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15302, 300 lines modified | Offset 15302, 300 lines modified | ||
| 0003bc50:·7267·6574·3d22·2369·646d·3830·3838·2220··rget="#idm8088"· | 0003bc50:·7267·6574·3d22·2369·646d·3830·3838·2220··rget="#idm8088"· | ||
| 0003bc60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bc60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bc70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bc70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bc80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bc80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bc90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bc90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bca0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bca0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bcb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bcb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bcc0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003bcd0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bce0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bcf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bd00:·643d·2269·646d·3830·3838·223e·3c70·7265··d="idm8088"><pre | |||
| 0003bd10:·3e3c·636f·6465·3e0a·2320·4669·6e64·2077··><code>.#·Find·w | |||
| 0003bd20:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | |||
| 0003bd30:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | |||
| 0003bd40:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | |||
| 0003bd50:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | |||
| 0003bd60:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | |||
| 0003bd70:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | |||
| 0003bd80:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | |||
| 0003bd90:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | |||
| 0003bda0:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | |||
| 0003bdb0:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | |||
| 0003bdc0:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | |||
| 0003bdd0:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | |||
| 0003bde0:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | |||
| 0003bdf0:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | |||
| 0003be00:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | |||
| 0003be10:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | |||
| 0003be20:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | |||
| 0003be30:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | |||
| 0003be40:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | |||
| 0003be50:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | |||
| 0003be60:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | |||
| 0003be70:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | |||
| 0003be80:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | |||
| 0003be90:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | |||
| 0003bea0:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | |||
| 0003beb0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003bec0:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | |||
| 0003bed0:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | |||
| 0003bee0:·2020·2020·646e·6620·7265·696e·7374·616c······dnf·reinstal | |||
| 0003bef0:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | |||
| 0003bf00:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | |||
| 0003bf10:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003bf20:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bf30:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bf40:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bf50:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bf60:·7267·6574·3d22·2369·646d·3830·3839·2220··rget="#idm8089"· | |||
| 0003bf70:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bf80:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bf90:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bfa0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bfb0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bfc0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b | 0003bfd0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003b | 0003bfe0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b | 0003bff0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003 | 0003c000:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003 | 0003c010:·2220·6964·3d22·6964·6d38·3038·3922·3e3c··"·id="idm8089">< | ||
| 0003 | 0003c020:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003 | 0003c030:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003 | 0003c040:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003 | 0003c050:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003 | 0003c060:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003 | 0003c070:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003 | 0003c080:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003 | 0003c090:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003 | 0003c0a0:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003 | 0003c0b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003 | 0003c0c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003 | 0003c0d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003 | 0003c0e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003 | 0003c0f0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003 | 0003c100:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 0003c110:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003 | 0003c120:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003 | 0003c130:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003 | 0003c140:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003 | 0003c150:·6427·0a20·2073·6574·5f66·6163·743a·0a20··d'.··set_fact:.· | ||
| 0003 | 0003c160:·2020·2070·6163·6b61·6765·5f6d·616e·6167·····package_manag | ||
| 0003 | 0003c170:·6572·5f72·6569·6e73·7461·6c6c·5f63·6d64··er_reinstall_cmd | ||
| 0003 | 0003c180:·3a20·646e·6620·7265·696e·7374·616c·6c20··:·dnf·reinstall· | ||
| 0003 | 0003c190:·2d79·0a20·2077·6865·6e3a·2061·6e73·6962··-y.··when:·ansib | ||
| 0003 | 0003c1a0:·6c65·5f64·6973·7472·6962·7574·696f·6e20··le_distribution· | ||
| 0003 | 0003c1b0:·696e·205b·2022·4665·646f·7261·222c·2022··in·[·"Fedora",·" | ||
| 0003 | 0003c1c0:·5265·6448·6174·222c·2022·4365·6e74·4f53··RedHat",·"CentOS | ||
| 0003 | 0003c1d0:·222c·2022·4f72·6163·6c65·4c69·6e75·7822··",·"OracleLinux" | ||
| 0003 | 0003c1e0:·205d·0a20·2074·6167·733a·0a20·202d·2043···].··tags:.··-·C | ||
| 0003 | 0003c1f0:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | ||
| 0003 | 0003c200:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003 | 0003c210:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003 | 0003c220:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003 | 0003c230:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003 | 0003c240:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003 | 0003c250:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003 | 0003c260:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003 | 0003c270:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003 | 0003c280:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003 | 0003c290:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003 | 0003c2a0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003 | 0003c2b0:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003 | 0003c2c0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003 | 0003c2d0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003 | 0003c2e0:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003 | 0003c2f0:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003 | 0003c300:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003c | 0003c310:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003c | 0003c320:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003c | 0003c330:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| Max diff block lines reached; 9854235/9879957 bytes (99.74%) of diff not shown. | |||
| Offset 62, 15 lines modified | Offset 62, 15 lines modified | ||
| 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official | 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official |
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:9 | 65 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 66 | ····*·cpe:/o:centos:centos:9 | 66 | ····*·cpe:/o:centos:centos:9 |
| 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 74 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 74 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 75 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 75 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 76 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 76 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 128, 14 lines modified | Offset 128, 27 lines modified | ||
| 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 137 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 138 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 139 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 140 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 141 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 142 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 140 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 148 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 141 | ··set_fact: | 149 | ··set_fact: |
| Offset 262, 27 lines modified | Offset 275, 14 lines modified | ||
| 262 | ··-·PCI-DSSv4-11.5.2 | 275 | ··-·PCI-DSSv4-11.5.2 |
| 263 | ··-·high_complexity | 276 | ··-·high_complexity |
| 264 | ··-·high_severity | 277 | ··-·high_severity |
| 265 | ··-·medium_disruption | 278 | ··-·medium_disruption |
| 266 | ··-·no_reboot_needed | 279 | ··-·no_reboot_needed |
| 267 | ··-·restrict_strategy | 280 | ··-·restrict_strategy |
| 268 | ··-·rpm_verify_hashes | 281 | ··-·rpm_verify_hashes |
| 269 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 270 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 271 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 272 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 273 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 274 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 275 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 276 | fi | ||
| 277 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 282 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 278 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 283 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 279 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 284 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 280 | run·the·following·command·to·determine·which·package·owns·it: | 285 | run·the·following·command·to·determine·which·package·owns·it: |
| 281 | $·rpm·-qf·FILENAME | 286 | $·rpm·-qf·FILENAME |
| 282 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 287 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 283 | $·sudo·rpm·--setugids·PACKAGENAME | 288 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 301, 14 lines modified | Offset 301, 40 lines modified | ||
| 301 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 301 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 302 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 302 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 303 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 303 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 304 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 304 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 305 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 305 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 313 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 314 | declare·-A·SETPERMS_RPM_DICT | ||
| 315 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 316 | #·is·expected·by·the·RPM·database | ||
| 317 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 318 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 319 | do | ||
| 320 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 321 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 322 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 323 | done | ||
| 324 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 325 | #·correct·values | ||
| 326 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 327 | do | ||
| 328 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 329 | done | ||
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 313 | -·name:·Read·list·of·files·with·incorrect·ownership | 335 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 314 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 336 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 383, 40 lines modified | Offset 409, 14 lines modified | ||
| 383 | ··-·PCI-DSSv4-11.5.2 | 409 | ··-·PCI-DSSv4-11.5.2 |
| 384 | ··-·high_complexity | 410 | ··-·high_complexity |
| 385 | ··-·high_severity | 411 | ··-·high_severity |
| 386 | ··-·medium_disruption | 412 | ··-·medium_disruption |
| 387 | ··-·no_reboot_needed | 413 | ··-·no_reboot_needed |
| 388 | ··-·restrict_strategy | 414 | ··-·restrict_strategy |
| 389 | ··-·rpm_verify_ownership | 415 | ··-·rpm_verify_ownership |
| 390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 391 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 392 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 393 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 394 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 395 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1021334/1029167 bytes (99.24%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000384f0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038500:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038500:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038510:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038510:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038520:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038520:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038530:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038530:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038540:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038540:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038550:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038560:·6173·206f·6620·3230·323 | 00038560:·6173·206f·6620·3230·3235·2d31·322d·3130··as·of·2025-12-10 | ||
| 00038570:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038570:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038580:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038580:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038590:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038590:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000385a0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000385a0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000385b0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000385b0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000385c0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000385c0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000385d0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000385d0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15144, 197 lines modified | Offset 15144, 197 lines modified | ||
| 0003b270:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b270:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b280:·3839·3331·2220·7461·6269·6e64·6578·3d22··8931"·tabindex=" | 0003b280:·3839·3331·2220·7461·6269·6e64·6578·3d22··8931"·tabindex=" | ||
| 0003b290:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b290:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b2a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b2a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b2b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b2b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b2c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b2c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b2d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b2d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b2e0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b2f0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b300:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b310:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b320:·7073·6522·2069·643d·2269·646d·3839·3331··pse"·id="idm8931 | |||
| 0003b330:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | |||
| 0003b340:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b350:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b360:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b370:·6d73·0a69·6620·2820·5b20·2120·2d66·202f··ms.if·(·[·!·-f·/ | |||
| 0003b380:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003b390:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003b3a0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003b3b0:·7620·5d20·2661·6d70·3b26·616d·703b·2021··v·]·&&·! | |||
| 0003b2e0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b2f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b300:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b310:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b320:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b330:·3933·3122·3e3c·7461·626c·6520·636c·6173··931"><table·clas | |||
| 0003b340:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b350:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b360:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b370:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b380:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b390:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 0003b3a0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b3b0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003b3c0:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003b3d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b3e0:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0003b3f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b400:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b410:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b420:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b430:·6f64·653e·2d20·6e61·6d65·3a20·4368·6563··ode>-·name:·Chec | |||
| 0003b440:·6b20·746f·2073·6565·2074·6865·2063·7572··k·to·see·the·cur | |||
| 0003b450:·7265·6e74·2073·7461·7475·7320·6f66·2046··rent·status·of·F | |||
| 0003b460:·4950·5320·6d6f·6465·0a20·2063·6f6d·6d61··IPS·mode.··comma | |||
| 0003b470:·6e64·3a20·2f75·7372·2f62·696e·2f66·6970··nd:·/usr/bin/fip | |||
| 0003b480:·732d·6d6f·6465·2d73·6574·7570·202d·2d63··s-mode-setup·--c | |||
| 0003b490:·6865·636b·0a20·2072·6567·6973·7465·723a··heck.··register: | |||
| 0003b4a0:·2069·735f·6669·7073·5f65·6e61·626c·6564···is_fips_enabled | |||
| 0003b4b0:·0a20·2063·6861·6e67·6564·5f77·6865·6e3a··.··changed_when: | |||
| 0003b4c0:·2066·616c·7365·0a20·2066·6169·6c65·645f···false.··failed_ | |||
| 0003b4d0:·7768·656e·3a20·6661·6c73·650a·2020·7768··when:·false.··wh | |||
| 0003b4e0:·656e·3a20·2820·616e·7369·626c·655f·7669··en:·(·ansible_vi | |||
| 0003b4f0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b500:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b510:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b520:·767a·222c·2022·706f·646d·616e·222c·0a20··vz",·"podman",.· | |||
| 0003b | 0003b3c0:·2028·205b·2022·247b·636f·6e74·6169·6e65···(·[·"${containe | ||
| 0003b540:·616e·6420·6e6f·7420·2820·6c6f·6f6b·7570··and·not·(·lookup | |||
| 0003b550:·2822·656e·7622·2c20·2263·6f6e·7461·696e··("env",·"contain | |||
| 0003b560:·6572·2229·203d·3d20·2262·7772·6170·2d6f··er")·==·"bwrap-o | |||
| 0003b570:·7362·7569·6c64·2220·2920·290a·2020·7461··sbuild"·)·).··ta | |||
| 0003b580:·6773·3a0a·2020·2d20·4449·5341·2d53·5449··gs:.··-·DISA-STI | |||
| 0003b590:·472d·5248·454c·2d30·392d·3637·3130·3130··G-RHEL-09-671010 | |||
| 0003b5a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b5b0:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 0003b5c0:·542d·3830·302d·3533·2d49·412d·370a·2020··T-800-53-IA-7.·· | |||
| 0003b5d0:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003b5e0:·2d31·320a·2020·2d20·4e49·5354·2d38·3030··-12.··-·NIST-800 | |||
| 0003b5f0:·2d35·332d·5343·2d31·3228·3229·0a20·202d··-53-SC-12(2).··- | |||
| 0003b600:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003b610:·3132·2833·290a·2020·2d20·4e49·5354·2d38··12(3).··-·NIST-8 | |||
| 0003b620:·3030·2d35·332d·5343·2d31·330a·2020·2d20··00-53-SC-13.··-· | |||
| 0003b630:·656e·6162·6c65·5f64·7261·6375·745f·6669··enable_dracut_fi | |||
| 0003b640:·7073·5f6d·6f64·756c·650a·2020·2d20·6869··ps_module.··-·hi | |||
| 0003b650:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | |||
| 0003b660:·6d65·6469·756d·5f63·6f6d·706c·6578·6974··medium_complexit | |||
| 0003b670:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | |||
| 0003b680:·7275·7074·696f·6e0a·2020·2d20·7265·626f··ruption.··-·rebo | |||
| 0003b690:·6f74·5f72·6571·7569·7265·640a·2020·2d20··ot_required.··-· | |||
| 0003b6a0:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | |||
| 0003b6b0:·790a·0a2d·206e·616d·653a·2045·6e61·626c··y..-·name:·Enabl | |||
| 0003b6c0:·6520·4649·5053·206d·6f64·650a·2020·636f··e·FIPS·mode.··co | |||
| 0003b6d0:·6d6d·616e·643a·202f·7573·722f·6269·6e2f··mmand:·/usr/bin/ | |||
| 0003b6e0:·6669·7073·2d6d·6f64·652d·7365·7475·7020··fips-mode-setup· | |||
| 0003b6f0:·2d2d·656e·6162·6c65·0a20·2077·6865·6e3a··--enable.··when: | |||
| 0003b700:·0a20·202d·2028·2061·6e73·6962·6c65·5f76··.··-·(·ansible_v | |||
| 0003b710:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b720:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b730:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b740:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b750:·2263·6f6e·7461·696e·6572·225d·0a20·2020··"container"].··· | |||
| 0003b760:·2061·6e64·206e·6f74·2028·206c·6f6f·6b75···and·not·(·looku | |||
| 0003b770:·7028·2265·6e76·222c·2022·636f·6e74·6169··p("env",·"contai | |||
| 0003b | 0003b3d0:·723a·2d7d·2220·3d3d·2022·6277·7261·702d··r:-}"·==·"bwrap- | ||
| 0003b | 0003b3e0:·6f73·6275·696c·6422·205d·2029·2029·3b20··osbuild"·]·)·);· | ||
| 0003b3f0:·7468·656e·0a0a·6669·7073·2d6d·6f64·652d··then..fips-mode- | |||
| 0003b400:·7365·7475·7020·2d2d·656e·6162·6c65·0a46··setup·--enable.F | |||
| 0003b410:·4950·535f·434f·4e46·3d22·2f65·7463·2f64··IPS_CONF="/etc/d | |||
| 0003b420:·7261·6375·742e·636f·6e66·2e64·2f34·302d··racut.conf.d/40- | |||
| 0003b430:·6669·7073·2e63·6f6e·6622·0a69·6620·2120··fips.conf".if·!· | |||
| 0003b440:·6772·6570·2022·5e61·6464·5f64·7261·6375··grep·"^add_dracu | |||
| 0003b7a0:·2069·735f·6669·7073·5f65·6e61·626c·6564···is_fips_enabled | |||
| 0003b7b0:·2e73·7464·6f75·742e·6669·6e64·2827·4649··.stdout.find('FI | |||
| 0003b7c0:·5053·206d·6f64·6520·6973·2065·6e61·626c··PS·mode·is·enabl | |||
| 0003b7d0:·6564·2e27·2920·3d3d·202d·310a·2020·7461··ed.')·==·-1.··ta | |||
| 0003b7e0:·6773·3a0a·2020·2d20·4449·5341·2d53·5449··gs:.··-·DISA-STI | |||
| 0003b7f0:·472d·5248·454c·2d30·392d·3637·3130·3130··G-RHEL-09-671010 | |||
| 0003b800:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b810:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| Max diff block lines reached; 6175590/6202554 bytes (99.57%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 14 lines modified | Offset 108, 27 lines modified | ||
| 108 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 108 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 109 | ············_\x8i_\x8s_\x8m······1446 | 109 | ············_\x8i_\x8s_\x8m······1446 |
| 110 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 110 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 111 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 111 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 112 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 112 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 117 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 118 | fips-mode-setup·--enable | ||
| 119 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 120 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 121 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 122 | fi | ||
| 123 | else | ||
| 124 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 125 | fi | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 120 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 131 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 121 | ··command:·/usr/bin/fips-mode-setup·--check | 132 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 176, 27 lines modified | Offset 189, 14 lines modified | ||
| 176 | ··-·NIST-800-53-SC-13 | 189 | ··-·NIST-800-53-SC-13 |
| 177 | ··-·enable_dracut_fips_module | 190 | ··-·enable_dracut_fips_module |
| 178 | ··-·high_severity | 191 | ··-·high_severity |
| 179 | ··-·medium_complexity | 192 | ··-·medium_complexity |
| 180 | ··-·medium_disruption | 193 | ··-·medium_disruption |
| 181 | ··-·reboot_required | 194 | ··-·reboot_required |
| 182 | ··-·restrict_strategy | 195 | ··-·restrict_strategy |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 184 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 185 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 186 | fips-mode-setup·--enable | ||
| 187 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 188 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 189 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 190 | fi | ||
| 191 | else | ||
| 192 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 193 | fi | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | To·enable·FIPS·mode,·run·the·following·command: | 197 | To·enable·FIPS·mode,·run·the·following·command: |
| 196 | fips-mode-setup·--enable | 198 | fips-mode-setup·--enable |
| 197 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 199 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 198 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 200 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 199 | ····*·Creating·/etc/system-fips | 201 | ····*·Creating·/etc/system-fips |
| Offset 210, 14 lines modified | Offset 210, 41 lines modified | ||
| 210 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 210 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 211 | ············_\x8i_\x8s_\x8m······1446 | 211 | ············_\x8i_\x8s_\x8m······1446 |
| 212 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 212 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 213 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 213 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 214 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 214 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 215 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 215 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 216 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 216 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 218 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 219 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 220 | var_system_crypto_policy='FIPS:OSPP' | ||
| 221 | fips-mode-setup·--enable | ||
| 222 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 223 | rc=$? | ||
| 224 | if·test·"$rc"·=·127;·then | ||
| 225 | » echo·"$stderr_of_call"·>&2 | ||
| 226 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 227 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 228 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 229 | » false··#·end·with·an·error·code | ||
| 230 | elif·test·"$rc"·!=·0;·then | ||
| 231 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 232 | » false··#·end·with·an·error·code | ||
| 233 | fi | ||
| 234 | else | ||
| 235 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 236 | fi | ||
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 218 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 219 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 220 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 221 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 222 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 242 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 223 | ··set_fact: | 243 | ··set_fact: |
| Offset 321, 41 lines modified | Offset 348, 14 lines modified | ||
| 321 | ··-·medium_disruption | 348 | ··-·medium_disruption |
| 322 | ··-·reboot_required | 349 | ··-·reboot_required |
| 323 | ··-·restrict_strategy | 350 | ··-·restrict_strategy |
| 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 351 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 325 | [customizations] | 352 | [customizations] |
| 326 | fips·=·true | 353 | fips·=·true |
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 328 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 329 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 330 | var_system_crypto_policy='FIPS:OSPP' | ||
| Max diff block lines reached; 869748/876540 bytes (99.23%) of diff not shown. | |||
| Offset 14415, 16 lines modified | Offset 14415, 16 lines modified | ||
| 000384e0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000384e0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 000384f0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 000384f0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038500:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038500:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038510:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038510:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038520:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038520:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038530:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038530:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038540:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038540:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038550:·2020·2020·2028·6173·206f·6620·3230·323 | 00038550:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00038560:·2d31·3 | 00038560:·2d31·322d·3130·290a·2020·2020·2020·2020··-12-10).········ | ||
| 00038570:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038570:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038580:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038580:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038590:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038590:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000385a0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000385a0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000385b0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000385b0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000385c0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000385c0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000385d0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000385d0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15294, 301 lines modified | Offset 15294, 301 lines modified | ||
| 0003bbd0:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | 0003bbd0:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | ||
| 0003bbe0:·3838·2220·7461·6269·6e64·6578·3d22·3022··88"·tabindex="0" | 0003bbe0:·3838·2220·7461·6269·6e64·6578·3d22·3022··88"·tabindex="0" | ||
| 0003bbf0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003bbf0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003bc00:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003bc00:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003bc10:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003bc10:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003bc20:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003bc20:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003bc30:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003bc30:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003bc40:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003bc50:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003bc60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bc70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bc80:·6522·2069·643d·2269·646d·3830·3838·223e··e"·id="idm8088"> | |||
| 0003bc90:·3c70·7265·3e3c·636f·6465·3e0a·2320·4669··<pre><code>.#·Fi | |||
| 0003bca0:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | |||
| 0003bcb0:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | |||
| 0003bcc0:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | |||
| 0003bcd0:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | |||
| 0003bce0:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | |||
| 0003bcf0:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | |||
| 0003bd00:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | |||
| 0003bd10:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | |||
| 0003bd20:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | |||
| 0003bd30:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | |||
| 0003bd40:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | |||
| 0003bd50:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | |||
| 0003bd60:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | |||
| 0003bd70:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | |||
| 0003bd80:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003bd90:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | |||
| 0003bda0:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | |||
| 0003bdb0:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | |||
| 0003bdc0:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | |||
| 0003bdd0:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | |||
| 0003bde0:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | |||
| 0003bdf0:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | |||
| 0003be00:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | |||
| 0003be10:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | |||
| 0003be20:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | |||
| 0003be30:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | |||
| 0003be40:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | |||
| 0003be50:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | |||
| 0003be60:·2020·200a·2020·2020·646e·6620·7265·696e·····.····dnf·rein | |||
| 0003be70:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | |||
| 0003be80:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | |||
| 0003be90:·2020·2020·0a66·690a·3c2f·636f·6465·3e3c······.fi.</code>< | |||
| 0003bea0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003beb0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bec0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bed0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bee0:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003bef0:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | |||
| 0003bf00:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bf10:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bf20:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bf30:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bf40:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b | 0003bf50:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b | 0003bf60:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b | 0003bf70:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003bf80:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003bf90:·6170·7365·2220·6964·3d22·6964·6d38·3038··apse"·id="idm808 | ||
| 0003b | 0003bfa0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | ||
| 0003b | 0003bfb0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b | 0003bfc0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b | 0003bfd0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b | 0003bfe0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b | 0003bff0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003 | 0003c000:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003 | 0003c010:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003 | 0003c020:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003 | 0003c030:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003 | 0003c040:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003 | 0003c050:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003 | 0003c060:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003 | 0003c070:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003 | 0003c080:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003 | 0003c090:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003 | 0003c0a0:·3e2d·206e·616d·653a·2027·5365·7420·6661··>-·name:·'Set·fa | ||
| 0003 | 0003c0b0:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003 | 0003c0c0:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003 | 0003c0d0:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | ||
| 0003 | 0003c0e0:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003 | 0003c0f0:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003 | 0003c100:·5f63·6d64·3a20·646e·6620·7265·696e·7374··_cmd:·dnf·reinst | ||
| 0003 | 0003c110:·616c·6c20·2d79·0a20·2077·6865·6e3a·2061··all·-y.··when:·a | ||
| 0003 | 0003c120:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | ||
| 0003 | 0003c130:·696f·6e20·696e·205b·2022·4665·646f·7261··ion·in·[·"Fedora | ||
| 0003 | 0003c140:·222c·2022·5265·6448·6174·222c·2022·4365··",·"RedHat",·"Ce | ||
| 0003 | 0003c150:·6e74·4f53·222c·2022·4f72·6163·6c65·4c69··ntOS",·"OracleLi | ||
| 0003 | 0003c160:·6e75·7822·205d·0a20·2074·6167·733a·0a20··nux"·].··tags:.· | ||
| 0003 | 0003c170:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003 | 0003c180:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003 | 0003c190:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003 | 0003c1a0:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003 | 0003c1b0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003 | 0003c1c0:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003 | 0003c1d0:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003 | 0003c1e0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003 | 0003c1f0:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003 | 0003c200:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003 | 0003c210:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003 | 0003c220:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003 | 0003c230:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003 | 0003c240:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003 | 0003c250:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003 | 0003c260:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003 | 0003c270:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003 | 0003c280:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003 | 0003c290:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003 | 0003c2a0:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| Max diff block lines reached; 17086454/17112314 bytes (99.85%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 127, 14 lines modified | Offset 127, 27 lines modified | ||
| 127 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 127 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 128 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 128 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 129 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 129 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 136 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 137 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 138 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 139 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 140 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 141 | fi | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 139 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 147 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 140 | ··set_fact: | 148 | ··set_fact: |
| Offset 261, 27 lines modified | Offset 274, 14 lines modified | ||
| 261 | ··-·PCI-DSSv4-11.5.2 | 274 | ··-·PCI-DSSv4-11.5.2 |
| 262 | ··-·high_complexity | 275 | ··-·high_complexity |
| 263 | ··-·high_severity | 276 | ··-·high_severity |
| 264 | ··-·medium_disruption | 277 | ··-·medium_disruption |
| 265 | ··-·no_reboot_needed | 278 | ··-·no_reboot_needed |
| 266 | ··-·restrict_strategy | 279 | ··-·restrict_strategy |
| 267 | ··-·rpm_verify_hashes | 280 | ··-·rpm_verify_hashes |
| 268 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 269 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 270 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 271 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 272 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 273 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 274 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 275 | fi | ||
| 276 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 281 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 277 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 282 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 278 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 283 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 279 | run·the·following·command·to·determine·which·package·owns·it: | 284 | run·the·following·command·to·determine·which·package·owns·it: |
| 280 | $·rpm·-qf·FILENAME | 285 | $·rpm·-qf·FILENAME |
| 281 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 286 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 282 | $·sudo·rpm·--setugids·PACKAGENAME | 287 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 300, 14 lines modified | Offset 300, 40 lines modified | ||
| 300 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 300 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 301 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 301 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 302 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 302 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 303 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 303 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 304 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 304 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 305 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 305 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 306 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 306 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 312 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 313 | declare·-A·SETPERMS_RPM_DICT | ||
| 314 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 315 | #·is·expected·by·the·RPM·database | ||
| 316 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 317 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 318 | do | ||
| 319 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 320 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 321 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 322 | done | ||
| 323 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 324 | #·correct·values | ||
| 325 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 326 | do | ||
| 327 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 328 | done | ||
| 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 312 | -·name:·Read·list·of·files·with·incorrect·ownership | 334 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 313 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 335 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 382, 40 lines modified | Offset 408, 14 lines modified | ||
| 382 | ··-·PCI-DSSv4-11.5.2 | 408 | ··-·PCI-DSSv4-11.5.2 |
| 383 | ··-·high_complexity | 409 | ··-·high_complexity |
| 384 | ··-·high_severity | 410 | ··-·high_severity |
| 385 | ··-·medium_disruption | 411 | ··-·medium_disruption |
| 386 | ··-·no_reboot_needed | 412 | ··-·no_reboot_needed |
| 387 | ··-·restrict_strategy | 413 | ··-·restrict_strategy |
| 388 | ··-·rpm_verify_ownership | 414 | ··-·rpm_verify_ownership |
| 389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 390 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 391 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 392 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 393 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 394 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1642833/1650556 bytes (99.53%) of diff not shown. | |||
| Offset 14425, 15 lines modified | Offset 14425, 15 lines modified | ||
| 00038580:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038580:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038590:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038590:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 000385a0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 000385a0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 000385b0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 000385b0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 000385c0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 000385c0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 000385d0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 000385d0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 000385e0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 000385e0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 000385f0:·3230·323 | 000385f0:·3230·3235·2d31·322d·3130·290a·2020·2020··2025-12-10).···· | ||
| 00038600:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038600:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038610:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038610:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038620:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038620:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038630:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038630:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038640:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038640:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038650:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038650:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038660:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038660:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15227, 235 lines modified | Offset 15227, 235 lines modified | ||
| 0003b7a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b7a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b7b0:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 0003b7b0:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 0003b7c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b7c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b7d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b7d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b7e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b7e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b7f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b7f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b810:·5265·6d65·6469·6174·696f·6e20· | 0003b810:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003b820:·6 | 0003b820:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | ||
| 0003b830:· | 0003b830:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b840:· | 0003b840:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b850:· | 0003b850:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b860:· | 0003b860:·646d·3834·3238·223e·3c74·6162·6c65·2063··dm8428"><table·c | ||
| 0003b870:· | 0003b870:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b880:·6 | 0003b880:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b890:·6 | 0003b890:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b8a0:· | 0003b8a0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b8b0:· | 0003b8b0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b8c0:· | 0003b8c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b8d0:· | 0003b8d0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b8e0:·7 | 0003b8e0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b8f0:· | 0003b8f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b900:· | 0003b900:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b910:· | 0003b910:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b920:· | 0003b920:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b930:·6 | 0003b930:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b940:·6 | 0003b940:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b950:· | 0003b950:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b960:·653e·0a70·6163·6b61·6765·202d·2d61·6464··e>.package·--add | |||
| 0003b970:·3d61·6964·650a·3c2f·636f·6465·3e3c·2f70··=aide.</code></p | |||
| 0003b980:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b990:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b9a0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b9b0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b9c0:·7461·7267·6574·3d22·2369·646d·3834·3239··target="#idm8429 | |||
| 0003b9d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b9e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b9f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ba00:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ba10:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ba20:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ba30:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003ba40:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ba50:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ba60:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ba70:·6522·2069·643d·2269·646d·3834·3239·223e··e"·id="idm8429"> | |||
| 0003ba80:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ba90:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003baa0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bab0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bac0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003bad0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003bae0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003b960:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | ||
| 0003b970:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b980:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b990:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b9a0:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b9b0:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b9c0:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b9d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b9e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b9f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ba00:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ba10:·6765·743d·2223·6964·6d38·3432·3922·2074··get="#idm8429"·t | |||
| 0003ba20:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ba30:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ba40:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ba50:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ba60:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ba70:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003ba80:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003ba90:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003baa0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bab0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bac0:·3d22·6964·6d38·3432·3922·3e3c·7461·626c··="idm8429"><tabl | |||
| 0003bad0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bae0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003baf0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bb00:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bb10:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bb | 0003bb20:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003bb | 0003bb30:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003bb20:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003bb30:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bb40:·7 | 0003bb40:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003bb50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bb60:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bb | 0003bb70:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003bb60:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003bb70:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003bb80:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003bb90:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003bba0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003bbb0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003bbc0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003bb | 0003bb80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003bb90:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bba0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bbb0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bbc0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003bbd0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003bbe0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003bbf0:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003bc00:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003bc10:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003bc20:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003bc30:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003bc40:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003bc50:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003bc60:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| Max diff block lines reached; 32096041/32128249 bytes (99.90%) of diff not shown. | |||
| Offset 14448, 16 lines modified | Offset 14448, 16 lines modified | ||
| 000386f0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000386f0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038700:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038700:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038710:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038710:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038720:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038720:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038730:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038730:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038740:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038740:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038750:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038750:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038760:·2020·2020·2028·6173·206f·6620·3230·323 | 00038760:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00038770:·2d31·3 | 00038770:·2d31·322d·3130·290a·2020·2020·2020·2020··-12-10).········ | ||
| 00038780:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038780:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038790:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038790:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 000387a0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 000387a0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000387b0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000387b0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000387c0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000387c0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000387d0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000387d0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000387e0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000387e0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15246, 235 lines modified | Offset 15246, 235 lines modified | ||
| 0003b8d0:·2d74·6172·6765·743d·2223·6964·6d38·3432··-target="#idm842 | 0003b8d0:·2d74·6172·6765·743d·2223·6964·6d38·3432··-target="#idm842 | ||
| 0003b8e0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | 0003b8e0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 0003b8f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b8f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b900:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b900:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b910:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b910:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b920:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b920:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b930:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b930:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b940:·7469·6f6e·20 | 0003b940:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | ||
| 0003b950:· | 0003b950:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b960:· | 0003b960:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b970:· | 0003b970:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b980:· | 0003b980:·7365·2220·6964·3d22·6964·6d38·3432·3822··se"·id="idm8428" | ||
| 0003b990:·3 | 0003b990:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b9a0:· | 0003b9a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b9b0:·6 | 0003b9b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b9c0:· | 0003b9c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b9d0:· | 0003b9d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b9e0:· | 0003b9e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b9f0:· | 0003b9f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003ba00:· | 0003ba00:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003ba10:· | 0003ba10:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003ba20:· | 0003ba20:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003ba30:·6 | 0003ba30:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003ba40:· | 0003ba40:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003ba50:· | 0003ba50:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003ba60:· | 0003ba60:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003ba70:· | 0003ba70:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003ba80:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003ba90:·6167·6520·2d2d·6164·643d·6169·6465·0a3c··age·--add=aide.< | |||
| 0003baa0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bab0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bac0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ba | 0003ba80:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | ||
| 0003ba90:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003baa0:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003bab0:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003bac0:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003bad0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003bae0:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003baf0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bb00:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bb10:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003bb20:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bb30:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bb40:·646d·3834·3239·2220·7461·6269·6e64·6578··dm8429"·tabindex | |||
| 0003bb50:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bb60:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bb70:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bb80:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bb90:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003bba0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003bbb0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003bbc0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bbd0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bbe0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003bbf0:·3239·223e·3c74·6162·6c65·2063·6c61·7373··29"><table·class | |||
| 0003bc00:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bc10:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bc20:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bc30:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bc40:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bc50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bc60:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003bc70:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003bc80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bc90:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003bca0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bcb0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bcc0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bcd0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bce0:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0003bcf0:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003bd00:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003bd10:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003bd20:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0003bd30:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003bd40:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003bd50:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003bd60:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003bd70:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003bd80:·6522·203b·2074·6865·6e0a·2020·2020·646e··e"·;·then.····dn | |||
| 0003bd90:·6620·696e·7374·616c·6c20·2d79·2022·6169··f·install·-y·"ai | |||
| 0003bda0:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 0003bdb0:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003bdc0:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003bdd0:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003bde0:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003bdf0:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0003be00:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003be10:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b | 0003be20:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003baf0:·2223·6964·6d38·3432·3922·2074·6162·696e··"#idm8429"·tabin | |||
| 0003bb00:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bb10:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bb20:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bb30:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bb40:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bb50:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003bb60:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003bb70:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bb80:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bb90:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bba0:·6964·6d38·3432·3922·3e3c·7461·626c·6520··idm8429"><table· | |||
| 0003bbb0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bbc0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bbd0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bbe0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bbf0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bc00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b | 0003be30:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| Max diff block lines reached; 31957479/31989825 bytes (99.90%) of diff not shown. | |||
| Offset 14354, 15 lines modified | Offset 14354, 15 lines modified | ||
| 00038110:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038110:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038120:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038120:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038130:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038130:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038140:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038140:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038150:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038150:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038160:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038160:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038170:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038170:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038180:·7320·6f66·2032·3032·3 | 00038180:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 00038190:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038190:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000381a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000381a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000381b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000381b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000381c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000381c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000381d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000381d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000381e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000381e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000381f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000381f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15399, 239 lines modified | Offset 15399, 239 lines modified | ||
| 0003c260:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c260:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c270:·743d·2223·6964·6d32·3533·3222·2074·6162··t="#idm2532"·tab | 0003c270:·743d·2223·6964·6d32·3533·3222·2074·6162··t="#idm2532"·tab | ||
| 0003c280:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c280:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c290:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c290:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c2a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c2a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c2b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c2b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c2c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c2c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c2d0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003c2d0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003c2e0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003c2f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c300:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c310:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c320:·6964·6d32·3533·3222·3e3c·7072·653e·3c63··idm2532"><pre><c | |||
| 0003c330:·6f64·653e·0a76·6172·5f73·7973·7465·6d5f··ode>.var_system_ | |||
| 0003c2e0:·7562·6572·6e65·7465·7320·736e·6970·7065··ubernetes·snippe | |||
| 0003c2f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c300:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c310:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c320:·2220·6964·3d22·6964·6d32·3533·3222·3e3c··"·id="idm2532">< | |||
| 0003c330:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c340:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c350:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c360:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c370:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c380:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c390:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c3a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c3b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c3c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c3d0:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0003c3e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c3f0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c400:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003c410:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c420:·653e·3c63·6f64·653e·2d2d·2d0a·6170·6956··e><code>---.apiV | |||
| 0003c430:·6572·7369·6f6e·3a20·6d61·6368·696e·6563··ersion:·machinec | |||
| 0003c440:·6f6e·6669·6775·7261·7469·6f6e·2e6f·7065··onfiguration.ope | |||
| 0003c450:·6e73·6869·6674·2e69·6f2f·7631·0a6b·696e··nshift.io/v1.kin | |||
| 0003c460:·643a·204d·6163·6869·6e65·436f·6e66·6967··d:·MachineConfig | |||
| 0003c470:·0a73·7065·633a·0a20·2063·6f6e·6669·673a··.spec:.··config: | |||
| 0003c480:·0a20·2020·2069·676e·6974·696f·6e3a·0a20··.····ignition:.· | |||
| 0003c490:·2020·2020·2076·6572·7369·6f6e·3a20·332e·······version:·3. | |||
| 0003c4a0:·312e·300a·2020·2020·7379·7374·656d·643a··1.0.····systemd: | |||
| 0003c4b0:·0a20·2020·2020·2075·6e69·7473·3a0a·2020··.······units:.·· | |||
| 0003c4c0:·2020·2020·2020·2d20·6e61·6d65·3a20·636f········-·name:·co | |||
| 0003c4d0:·6e66·6967·7572·652d·6372·7970·746f·2d70··nfigure-crypto-p | |||
| 0003c4e0:·6f6c·6963·792e·7365·7276·6963·650a·2020··olicy.service.·· | |||
| 0003c4f0:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 0003c500:·2074·7275·650a·2020·2020·2020·2020·2020···true.·········· | |||
| 0003c510:·636f·6e74·656e·7473·3a20·7c0a·2020·2020··contents:·|.···· | |||
| 0003c520:·2020·2020·2020·2020·5b55·6e69·745d·0a20··········[Unit].· | |||
| 0003c530:·2020·2020·2020·2020·2020·2042·6566·6f72·············Befor | |||
| 0003c540:·653d·6b75·6265·6c65·742e·7365·7276·6963··e=kubelet.servic | |||
| 0003c550:·650a·2020·2020·2020·2020·2020·2020·5b53··e.············[S | |||
| 0003c560:·6572·7669·6365·5d0a·2020·2020·2020·2020··ervice].········ | |||
| 0003c570:·2020·2020·5479·7065·3d6f·6e65·7368·6f74······Type=oneshot | |||
| 0003c580:·0a20·2020·2020·2020·2020·2020·2045·7865··.············Exe | |||
| 0003c590:·6353·7461·7274·3d75·7064·6174·652d·6372··cStart=update-cr | |||
| 0003c5a0:·7970·746f·2d70·6f6c·6963·6965·7320·2d2d··ypto-policies·-- | |||
| 0003c5b0:·7365·7420·7b7b·2e76·6172·5f73·7973·7465··set·{{.var_syste | |||
| 0003c | 0003c340:·6372·7970·746f·5f70·6f6c·6963·793d·273c··crypto_policy='< | ||
| 0003c5d0:·7d0a·2020·2020·2020·2020·2020·2020·5265··}.············Re | |||
| 0003c5e0:·6d61·696e·4166·7465·7245·7869·743d·7965··mainAfterExit=ye | |||
| 0003c5f0:·730a·2020·2020·2020·2020·2020·2020·5b49··s.············[I | |||
| 0003c600:·6e73·7461·6c6c·5d0a·2020·2020·2020·2020··nstall].········ | |||
| 0003c610:·2020·2020·5761·6e74·6564·4279·3d6d·756c······WantedBy=mul | |||
| 0003c620:·7469·2d75·7365·722e·7461·7267·6574·0a3c··ti-user.target.< | |||
| 0003c630:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c640:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c650:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c660:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c670:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c680:·2223·6964·6d32·3533·3322·2074·6162·696e··"#idm2533"·tabin | |||
| 0003c690:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c6a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c6b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c6c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c6d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c6e0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003c6f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003c700:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c710:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c720:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c730:·2269·646d·3235·3333·223e·3c74·6162·6c65··"idm2533"><table | |||
| 0003c740:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c750:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c760:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c770:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c780:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c790:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c7a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c7b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003c7c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c7d0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003c7e0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c7f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c800:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003c810:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003c820:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c830:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | |||
| 0003c840:·4620·5661·6c75·6520·7661·725f·7379·7374··F·Value·var_syst | |||
| 0003c850:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003c860:·2023·2070·726f·6d6f·7465·2074·6f20·7661···#·promote·to·va | |||
| 0003c870:·7269·6162·6c65·0a20·2073·6574·5f66·6163··riable.··set_fac | |||
| 0003c880:·743a·0a20·2020·2076·6172·5f73·7973·7465··t:.····var_syste | |||
| 0003c890:·6d5f·6372·7970·746f·5f70·6f6c·6963·793a··m_crypto_policy: | |||
| 0003c8a0:·2021·2173·7472·203c·6162·6272·2074·6974···!!str·<abbr·tit | |||
| 0003c8b0:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003c8c0:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003c8d0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003c8e0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| Max diff block lines reached; 18027918/18060678 bytes (99.82%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | ····*·cpe:/o:fedoraproject:fedora:41 | 43 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:42 | 44 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:43 | 45 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:44 | 46 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 47 | ····*·cpe:/o:fedoraproject:fedora:45 | 47 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 133, 39 lines modified | Offset 133, 33 lines modified | ||
| 133 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 133 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| 134 | ············_\x8i_\x8s_\x8m······1446 | 134 | ············_\x8i_\x8s_\x8m······1446 |
| 135 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 135 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 136 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 136 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 137 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 137 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 141 | var_system_crypto_policy='DEFAULT' | ||
| 142 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 143 | rc=$? | ||
| 144 | if·test·"$rc"·=·127;·then | ||
| 145 | » echo·"$stderr_of_call"·>&2 | ||
| 146 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 147 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 148 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 149 | » false··#·end·with·an·error·code | ||
| 150 | elif·test·"$rc"·!=·0;·then | ||
| 151 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 152 | » false··#·end·with·an·error·code | ||
| 153 | fi | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 145 | --- | ||
| 146 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 147 | kind:·MachineConfig | ||
| 148 | spec: | ||
| 149 | ··config: | ||
| 150 | ····ignition: | ||
| 151 | ······version:·3.1.0 | ||
| 152 | ····systemd: | ||
| 153 | ······units: | ||
| 154 | ········-·name:·configure-crypto-policy.service | ||
| 155 | ··········enabled:·true | ||
| 156 | ··········contents:·| | ||
| 157 | ············[Unit] | ||
| 158 | ············Before=kubelet.service | ||
| 159 | ············[Service] | ||
| 160 | ············Type=oneshot | ||
| 161 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 162 | ············RemainAfterExit=yes | ||
| 163 | ············[Install] | ||
| 164 | ············WantedBy=multi-user.target | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 170 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 159 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 171 | ··set_fact: | 160 | ··set_fact: |
| Offset 208, 41 lines modified | Offset 202, 74 lines modified | ||
| 208 | ··-·PCI-DSSv4-2.2.7 | 202 | ··-·PCI-DSSv4-2.2.7 |
| 209 | ··-·configure_crypto_policy | 203 | ··-·configure_crypto_policy |
| 210 | ··-·high_severity | 204 | ··-·high_severity |
| 211 | ··-·low_complexity | 205 | ··-·low_complexity |
| 212 | ··-·low_disruption | 206 | ··-·low_disruption |
| 213 | ··-·no_reboot_needed | 207 | ··-·no_reboot_needed |
| 214 | ··-·restrict_strategy | 208 | ··-·restrict_strategy |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 216 | var_system_crypto_policy='DEFAULT' | ||
| 217 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 218 | rc=$? | ||
| 219 | if·test·"$rc"·=·127;·then | ||
| 220 | » echo·"$stderr_of_call"·>&2 | ||
| 221 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 222 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 223 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 224 | » false··#·end·with·an·error·code | ||
| 225 | elif·test·"$rc"·!=·0;·then | ||
| 226 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 227 | » false··#·end·with·an·error·code | ||
| 228 | 210 | C.Co.om.mp.pl.le.ex.xi.it.ty.y:.:·low | |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 214 | --- | ||
| 215 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 216 | kind:·MachineConfig | ||
| 217 | spec: | ||
| 218 | ··config: | ||
| 219 | ····ignition: | ||
| 220 | ······version:·3.1.0 | ||
| 221 | ····systemd: | ||
| 222 | ······units: | ||
| 223 | ········-·name:·configure-crypto-policy.service | ||
| 224 | ··········enabled:·true | ||
| 225 | ··········contents:·| | ||
| 226 | ············[Unit] | ||
| 227 | ············Before=kubelet.service | ||
| 228 | ············[Service] | ||
| 229 | ············Type=oneshot | ||
| 230 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 231 | ············RemainAfterExit=yes | ||
| 232 | ············[Install] | ||
| 233 | ············WantedBy=multi-user.target | ||
| 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·G\x8Gn\x8nu\x8uT\x8TL\x8LS\x8S·l\x8li\x8ib\x8br\x8ra\x8ar\x8ry\x8y·t\x8to\x8o·u\x8us\x8se\x8e·D\x8Do\x8oD\x8D-\x8-a\x8ap\x8pp\x8pr\x8ro\x8ov\x8ve\x8ed\x8d·T\x8TL\x8LS\x8S·E\x8En\x8nc\x8cr\x8ry\x8yp\x8pt\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 234 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·G\x8Gn\x8nu\x8uT\x8TL\x8LS\x8S·l\x8li\x8ib\x8br\x8ra\x8ar\x8ry\x8y·t\x8to\x8o·u\x8us\x8se\x8e·D\x8Do\x8oD\x8D-\x8-a\x8ap\x8pp\x8pr\x8ro\x8ov\x8ve\x8ed\x8d·T\x8TL\x8LS\x8S·E\x8En\x8nc\x8cr\x8ry\x8yp\x8pt\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 230 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·GnuTLS·is·supported·by·system·crypto·policy,·but·the·GnuTLS·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·/etc/crypto-policies/back-ends/gnutls.config·contains·the·following·line·and·is·not·commented·out:·+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0 | 235 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·GnuTLS·is·supported·by·system·crypto·policy,·but·the·GnuTLS·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·/etc/crypto-policies/back-ends/gnutls.config·contains·the·following·line·and·is·not·commented·out:·+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0 |
| 231 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·GnuTLS·library·violate·expectations,·and·makes·system·configuration·more·fragmented. | 236 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·GnuTLS·library·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 232 | Severity: ··medium | 237 | Severity: ··medium |
| Max diff block lines reached; 1755741/1761751 bytes (99.66%) of diff not shown. | |||
| Offset 14376, 16 lines modified | Offset 14376, 16 lines modified | ||
| 00038270:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038270:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038280:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038280:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038290:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038290:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 000382a0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 000382a0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 000382b0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 000382b0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 000382c0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 000382c0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 000382d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000382d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000382e0:·2020·2020·2028·6173·206f·6620·3230·323 | 000382e0:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 000382f0:·2d31·3 | 000382f0:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00038300:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038300:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038310:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038310:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038320:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038320:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038330:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038330:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038340:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038340:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038350:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038350:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038360:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038360:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15236, 300 lines modified | Offset 15236, 300 lines modified | ||
| 0003b830:·6574·3d22·2369·646d·3138·3632·2220·7461··et="#idm1862"·ta | 0003b830:·6574·3d22·2369·646d·3138·3632·2220·7461··et="#idm1862"·ta | ||
| 0003b840:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b840:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b850:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b850:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b860:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b860:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b870:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b870:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b880:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b880:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b890:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b890:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b8a0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b8b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b8c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b8d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b8e0:·2269·646d·3138·3632·223e·3c70·7265·3e3c··"idm1862"><pre>< | |||
| 0003b8f0:·636f·6465·3e0a·2320·4669·6e64·2077·6869··code>.#·Find·whi | |||
| 0003b900:·6368·2066·696c·6573·2068·6176·6520·696e··ch·files·have·in | |||
| 0003b910:·636f·7272·6563·7420·6861·7368·2028·6e6f··correct·hash·(no | |||
| 0003b920:·7420·696e·202f·6574·632c·2062·6563·6175··t·in·/etc,·becau | |||
| 0003b930:·7365·206f·6620·7468·6520·7379·7374·656d··se·of·the·system | |||
| 0003b940:·2072·656c·6174·6564·2063·6f6e·6669·6720···related·config· | |||
| 0003b950:·6669·6c65·7329·2061·6e64·2074·6865·6e20··files)·and·then· | |||
| 0003b960:·6765·7420·6669·6c65·7320·6e61·6d65·730a··get·files·names. | |||
| 0003b970:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b980:·7265·6374·5f68·6173·683d·2224·2872·706d··rect_hash="$(rpm | |||
| 0003b990:·202d·5661·202d·2d6e·6f63·6f6e·6669·6720···-Va·--noconfig· | |||
| 0003b9a0:·7c20·6772·6570·202d·4520·275e·2e2e·3527··|·grep·-E·'^..5' | |||
| 0003b9b0:·207c·2061·776b·2027·7b70·7269·6e74·2024···|·awk·'{print·$ | |||
| 0003b9c0:·4e46·7d27·2029·220a·0a69·6620·5b20·2d6e··NF}'·)"..if·[·-n | |||
| 0003b9d0:·2022·2466·696c·6573·5f77·6974·685f·696e···"$files_with_in | |||
| 0003b9e0:·636f·7272·6563·745f·6861·7368·2220·5d3b··correct_hash"·]; | |||
| 0003b9f0:·2074·6865·6e0a·2020·2020·2320·4672·6f6d···then.····#·From | |||
| 0003ba00:·2066·696c·6573·206e·616d·6573·2067·6574···files·names·get | |||
| 0003ba10:·2070·6163·6b61·6765·206e·616d·6573·2061···package·names·a | |||
| 0003ba20:·6e64·2063·6861·6e67·6520·6e65·776c·696e··nd·change·newlin | |||
| 0003ba30:·6520·746f·2073·7061·6365·2c20·6265·6361··e·to·space,·beca | |||
| 0003ba40:·7573·6520·7270·6d20·7772·6974·6573·2065··use·rpm·writes·e | |||
| 0003ba50:·6163·6820·7061·636b·6167·6520·746f·206e··ach·package·to·n | |||
| 0003ba60:·6577·206c·696e·650a·2020·2020·7061·636b··ew·line.····pack | |||
| 0003ba70:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | |||
| 0003ba80:·6c3d·2224·2872·706d·202d·7166·2024·6669··l="$(rpm·-qf·$fi | |||
| 0003ba90:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003baa0:·6374·5f68·6173·6820·7c20·7472·2027·5c6e··ct_hash·|·tr·'\n | |||
| 0003bab0:·2720·2720·2729·220a·0a20·2020·200a·2020··'·'·')"..····.·· | |||
| 0003bac0:·2020·646e·6620·7265·696e·7374·616c·6c20····dnf·reinstall· | |||
| 0003bad0:·2d79·2024·7061·636b·6167·6573·5f74·6f5f··-y·$packages_to_ | |||
| 0003bae0:·7265·696e·7374·616c·6c0a·2020·2020·0a66··reinstall.····.f | |||
| 0003baf0:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003bb00:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bb10:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bb20:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bb30:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bb40:·6574·3d22·2369·646d·3138·3633·2220·7461··et="#idm1863"·ta | |||
| 0003bb50:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bb60:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bb70:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bb80:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bb90:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bba0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b | 0003bbb0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b | 0003bbc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003bbd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003bbe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003bbf0:·6964·3d22·6964·6d31·3836·3322·3e3c·7461··id="idm1863"><ta | ||
| 0003b | 0003bc00:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003bc10:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003bc20:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003bc30:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003bc40:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003bc50:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003b | 0003bc60:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bc70:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b | 0003bc80:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003b | 0003bc90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003bca0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003bcb0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003bcc0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003bcd0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003b | 0003bce0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b | 0003bcf0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003b | 0003bd00:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| 0003b | 0003bd10:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | ||
| 0003b | 0003bd20:·696e·7374·616c·6c20·636f·6d6d·616e·6427··install·command' | ||
| 0003b | 0003bd30:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003b | 0003bd40:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | ||
| 0003b | 0003bd50:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | ||
| 0003b | 0003bd60:·646e·6620·7265·696e·7374·616c·6c20·2d79··dnf·reinstall·-y | ||
| 0003b | 0003bd70:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | ||
| 0003b | 0003bd80:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003b | 0003bd90:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003b | 0003bda0:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003b | 0003bdb0:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003b | 0003bdc0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003b | 0003bdd0:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003b | 0003bde0:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003b | 0003bdf0:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003b | 0003be00:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003b | 0003be10:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003b | 0003be20:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003be30:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003b | 0003be40:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003b | 0003be50:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003be60:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003b | 0003be70:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003b | 0003be80:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003be90:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003b | 0003bea0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003b | 0003beb0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003b | 0003bec0:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003b | 0003bed0:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003b | 0003bee0:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003b | 0003bef0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003b | 0003bf00:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| Max diff block lines reached; 26526483/26567799 bytes (99.84%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | ····*·cpe:/o:fedoraproject:fedora:41 | 49 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 50 | ····*·cpe:/o:fedoraproject:fedora:42 | 50 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 51 | ····*·cpe:/o:fedoraproject:fedora:43 | 51 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 52 | ····*·cpe:/o:fedoraproject:fedora:44 | 52 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 53 | ····*·cpe:/o:fedoraproject:fedora:45 | 53 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 113, 14 lines modified | Offset 113, 27 lines modified | ||
| 113 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 113 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 114 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 114 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 125 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 133 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 126 | ··set_fact: | 134 | ··set_fact: |
| Offset 247, 27 lines modified | Offset 260, 14 lines modified | ||
| 247 | ··-·PCI-DSSv4-11.5.2 | 260 | ··-·PCI-DSSv4-11.5.2 |
| 248 | ··-·high_complexity | 261 | ··-·high_complexity |
| 249 | ··-·high_severity | 262 | ··-·high_severity |
| 250 | ··-·medium_disruption | 263 | ··-·medium_disruption |
| 251 | ··-·no_reboot_needed | 264 | ··-·no_reboot_needed |
| 252 | ··-·restrict_strategy | 265 | ··-·restrict_strategy |
| 253 | ··-·rpm_verify_hashes | 266 | ··-·rpm_verify_hashes |
| 254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 255 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 256 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 257 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 258 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 259 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 260 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 261 | fi | ||
| 262 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 267 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 263 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 268 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 264 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Fedora. | 269 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Fedora. |
| 265 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 270 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 266 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 271 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 286, 14 lines modified | Offset 286, 41 lines modified | ||
| 286 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 286 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 287 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 287 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 288 | ············_\x8i_\x8s_\x8m······1446 | 288 | ············_\x8i_\x8s_\x8m······1446 |
| 289 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 289 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 290 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 290 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 293 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 294 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 295 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 296 | var_system_crypto_policy='FIPS' | ||
| 297 | fips-mode-setup·--enable | ||
| 298 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 299 | rc=$? | ||
| 300 | if·test·"$rc"·=·127;·then | ||
| 301 | » echo·"$stderr_of_call"·>&2 | ||
| 302 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 303 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 304 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 305 | » false··#·end·with·an·error·code | ||
| 306 | elif·test·"$rc"·!=·0;·then | ||
| 307 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 308 | » false··#·end·with·an·error·code | ||
| 309 | fi | ||
| 310 | else | ||
| 311 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 312 | fi | ||
| 293 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 294 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 295 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 296 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 297 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 298 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 318 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 299 | ··set_fact: | 319 | ··set_fact: |
| Offset 393, 41 lines modified | Offset 420, 14 lines modified | ||
| 393 | ··-·medium_disruption | 420 | ··-·medium_disruption |
| 394 | ··-·reboot_required | 421 | ··-·reboot_required |
| 395 | ··-·restrict_strategy | 422 | ··-·restrict_strategy |
| 396 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 423 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 397 | [customizations] | 424 | [customizations] |
| 398 | fips·=·true | 425 | fips·=·true |
| 399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 400 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 401 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 402 | var_system_crypto_policy='FIPS' | ||
| Max diff block lines reached; 1615518/1623137 bytes (99.53%) of diff not shown. | |||
| Offset 14349, 15 lines modified | Offset 14349, 15 lines modified | ||
| 000380c0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000380c0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000380d0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000380d0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000380e0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000380e0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000380f0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000380f0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038100:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038100:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038110:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038110:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038120:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038120:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038130:·6173·206f·6620·3230·323 | 00038130:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00038140:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038140:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038150:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038150:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038160:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038160:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038170:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038170:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038180:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038180:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038190:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038190:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000381a0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000381a0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15177, 300 lines modified | Offset 15177, 300 lines modified | ||
| 0003b480:·6574·3d22·2369·646d·3138·3632·2220·7461··et="#idm1862"·ta | 0003b480:·6574·3d22·2369·646d·3138·3632·2220·7461··et="#idm1862"·ta | ||
| 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b4f0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b500:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b510:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b520:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b530:·2269·646d·3138·3632·223e·3c70·7265·3e3c··"idm1862"><pre>< | |||
| 0003b540:·636f·6465·3e0a·2320·4669·6e64·2077·6869··code>.#·Find·whi | |||
| 0003b550:·6368·2066·696c·6573·2068·6176·6520·696e··ch·files·have·in | |||
| 0003b560:·636f·7272·6563·7420·6861·7368·2028·6e6f··correct·hash·(no | |||
| 0003b570:·7420·696e·202f·6574·632c·2062·6563·6175··t·in·/etc,·becau | |||
| 0003b580:·7365·206f·6620·7468·6520·7379·7374·656d··se·of·the·system | |||
| 0003b590:·2072·656c·6174·6564·2063·6f6e·6669·6720···related·config· | |||
| 0003b5a0:·6669·6c65·7329·2061·6e64·2074·6865·6e20··files)·and·then· | |||
| 0003b5b0:·6765·7420·6669·6c65·7320·6e61·6d65·730a··get·files·names. | |||
| 0003b5c0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b5d0:·7265·6374·5f68·6173·683d·2224·2872·706d··rect_hash="$(rpm | |||
| 0003b5e0:·202d·5661·202d·2d6e·6f63·6f6e·6669·6720···-Va·--noconfig· | |||
| 0003b5f0:·7c20·6772·6570·202d·4520·275e·2e2e·3527··|·grep·-E·'^..5' | |||
| 0003b600:·207c·2061·776b·2027·7b70·7269·6e74·2024···|·awk·'{print·$ | |||
| 0003b610:·4e46·7d27·2029·220a·0a69·6620·5b20·2d6e··NF}'·)"..if·[·-n | |||
| 0003b620:·2022·2466·696c·6573·5f77·6974·685f·696e···"$files_with_in | |||
| 0003b630:·636f·7272·6563·745f·6861·7368·2220·5d3b··correct_hash"·]; | |||
| 0003b640:·2074·6865·6e0a·2020·2020·2320·4672·6f6d···then.····#·From | |||
| 0003b650:·2066·696c·6573·206e·616d·6573·2067·6574···files·names·get | |||
| 0003b660:·2070·6163·6b61·6765·206e·616d·6573·2061···package·names·a | |||
| 0003b670:·6e64·2063·6861·6e67·6520·6e65·776c·696e··nd·change·newlin | |||
| 0003b680:·6520·746f·2073·7061·6365·2c20·6265·6361··e·to·space,·beca | |||
| 0003b690:·7573·6520·7270·6d20·7772·6974·6573·2065··use·rpm·writes·e | |||
| 0003b6a0:·6163·6820·7061·636b·6167·6520·746f·206e··ach·package·to·n | |||
| 0003b6b0:·6577·206c·696e·650a·2020·2020·7061·636b··ew·line.····pack | |||
| 0003b6c0:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | |||
| 0003b6d0:·6c3d·2224·2872·706d·202d·7166·2024·6669··l="$(rpm·-qf·$fi | |||
| 0003b6e0:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003b6f0:·6374·5f68·6173·6820·7c20·7472·2027·5c6e··ct_hash·|·tr·'\n | |||
| 0003b700:·2720·2720·2729·220a·0a20·2020·200a·2020··'·'·')"..····.·· | |||
| 0003b710:·2020·646e·6620·7265·696e·7374·616c·6c20····dnf·reinstall· | |||
| 0003b720:·2d79·2024·7061·636b·6167·6573·5f74·6f5f··-y·$packages_to_ | |||
| 0003b730:·7265·696e·7374·616c·6c0a·2020·2020·0a66··reinstall.····.f | |||
| 0003b740:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b750:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b760:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b770:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b780:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b790:·6574·3d22·2369·646d·3138·3633·2220·7461··et="#idm1863"·ta | |||
| 0003b7a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b7b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b7c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b7d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b7e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b7f0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b | 0003b800:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b | 0003b810:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b820:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b830:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b840:·6964·3d22·6964·6d31·3836·3322·3e3c·7461··id="idm1863"><ta | ||
| 0003b | 0003b850:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003b860:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003b870:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003b880:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003b890:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003b8a0:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003b | 0003b8b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b8c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b | 0003b8d0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003b | 0003b8e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b8f0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003b900:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b910:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003b920:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003b | 0003b930:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b | 0003b940:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003b | 0003b950:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| 0003b | 0003b960:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | ||
| 0003b | 0003b970:·696e·7374·616c·6c20·636f·6d6d·616e·6427··install·command' | ||
| 0003b | 0003b980:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003b | 0003b990:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | ||
| 0003b | 0003b9a0:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | ||
| 0003b | 0003b9b0:·646e·6620·7265·696e·7374·616c·6c20·2d79··dnf·reinstall·-y | ||
| 0003b | 0003b9c0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | ||
| 0003b | 0003b9d0:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003b | 0003b9e0:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003b | 0003b9f0:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003b | 0003ba00:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003b | 0003ba10:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003b | 0003ba20:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003b | 0003ba30:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003b | 0003ba40:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003b | 0003ba50:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003b | 0003ba60:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003b | 0003ba70:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003ba80:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003b | 0003ba90:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003b | 0003baa0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003bab0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003b | 0003bac0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003b | 0003bad0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003bae0:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003b | 0003baf0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003b | 0003bb00:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003b | 0003bb10:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003b | 0003bb20:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003b | 0003bb30:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003b | 0003bb40:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003b | 0003bb50:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003b | 0003bb60:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| Max diff block lines reached; 13994481/14035659 bytes (99.71%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | ····*·cpe:/o:fedoraproject:fedora:41 | 42 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 43 | ····*·cpe:/o:fedoraproject:fedora:42 | 43 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:43 | 44 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:44 | 45 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:45 | 46 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 100, 14 lines modified | Offset 100, 27 lines modified | ||
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 102 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 102 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 103 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 103 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 108 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 109 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 110 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 111 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 112 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 113 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 114 | fi | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 112 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 120 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 113 | ··set_fact: | 121 | ··set_fact: |
| Offset 234, 27 lines modified | Offset 247, 14 lines modified | ||
| 234 | ··-·PCI-DSSv4-11.5.2 | 247 | ··-·PCI-DSSv4-11.5.2 |
| 235 | ··-·high_complexity | 248 | ··-·high_complexity |
| 236 | ··-·high_severity | 249 | ··-·high_severity |
| 237 | ··-·medium_disruption | 250 | ··-·medium_disruption |
| 238 | ··-·no_reboot_needed | 251 | ··-·no_reboot_needed |
| 239 | ··-·restrict_strategy | 252 | ··-·restrict_strategy |
| 240 | ··-·rpm_verify_hashes | 253 | ··-·rpm_verify_hashes |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 242 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 243 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 244 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 245 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 246 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 247 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 248 | fi | ||
| 249 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 254 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 250 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 255 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 251 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 256 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 252 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 257 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 253 | $·rpm·-qf·FILENAME | 258 | $·rpm·-qf·FILENAME |
| 254 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 259 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 275, 14 lines modified | Offset 275, 44 lines modified | ||
| 275 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 275 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 276 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 276 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 277 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 277 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 278 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 278 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 279 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 279 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 280 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 280 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 283 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 284 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 285 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 286 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 287 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 288 | declare·-A·SETPERMS_RPM_DICT | ||
| 289 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 290 | #·is·expected·by·the·RPM·database | ||
| 291 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 292 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 293 | do | ||
| 294 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 295 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 296 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 297 | ········do | ||
| 298 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 299 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 300 | ········done | ||
| 301 | done | ||
| 302 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 303 | #·correct·values | ||
| 304 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 305 | do | ||
| 306 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 307 | done | ||
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 283 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 284 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 285 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 286 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 287 | -·name:·Read·list·of·files·with·incorrect·permissions | 313 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 288 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 314 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 360, 44 lines modified | Offset 390, 14 lines modified | ||
| 360 | ··-·PCI-DSSv4-11.5.2 | 390 | ··-·PCI-DSSv4-11.5.2 |
| 361 | ··-·high_complexity | 391 | ··-·high_complexity |
| 362 | ··-·high_severity | 392 | ··-·high_severity |
| 363 | ··-·medium_disruption | 393 | ··-·medium_disruption |
| 364 | ··-·no_reboot_needed | 394 | ··-·no_reboot_needed |
| 365 | ··-·restrict_strategy | 395 | ··-·restrict_strategy |
| 366 | ··-·rpm_verify_permissions | 396 | ··-·rpm_verify_permissions |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1099505/1107612 bytes (99.27%) of diff not shown. | |||
| Offset 14354, 16 lines modified | Offset 14354, 16 lines modified | ||
| 00038110:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038110:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038120:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038120:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038130:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038130:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038140:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038140:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038150:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038150:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038160:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038160:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038170:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038170:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038180:·2028·6173·206f·6620·3230·323 | 00038180:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00038190:·3 | 00038190:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 000381a0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 000381a0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000381b0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000381b0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000381c0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000381c0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000381d0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000381d0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000381e0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000381e0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000381f0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000381f0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038200:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038200:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15168, 301 lines modified | Offset 15168, 301 lines modified | ||
| 0003b3f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b3f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b400:·2223·6964·6d31·3836·3222·2074·6162·696e··"#idm1862"·tabin | 0003b400:·2223·6964·6d31·3836·3222·2074·6162·696e··"#idm1862"·tabin | ||
| 0003b410:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b410:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b420:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b420:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b430:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b430:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b440:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b440:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b450:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b450:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b460:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b470:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b480:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b490:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b4a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b4b0:·6d31·3836·3222·3e3c·7072·653e·3c63·6f64··m1862"><pre><cod | |||
| 0003b4c0:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b4d0:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b4e0:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b4f0:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b500:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b510:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b520:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b530:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b540:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b550:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003b560:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003b570:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003b580:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003b590:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003b5a0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b5b0:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003b5c0:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003b5d0:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003b5e0:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003b5f0:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003b600:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003b610:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003b620:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003b630:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003b640:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003b650:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003b660:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b670:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003b680:·2027·2922·0a0a·2020·2020·0a20·2020·2064···')"..····.····d | |||
| 0003b690:·6e66·2072·6569·6e73·7461·6c6c·202d·7920··nf·reinstall·-y· | |||
| 0003b6a0:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003b6b0:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003b6c0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b6d0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b6e0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b6f0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b700:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b710:·2223·6964·6d31·3836·3322·2074·6162·696e··"#idm1863"·tabin | |||
| 0003b720:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b730:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b740:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b750:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b760:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003b770:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b | 0003b780:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b | 0003b790:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003b7a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003b7b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003b7c0:·2269·646d·3138·3633·223e·3c74·6162·6c65··"idm1863"><table | ||
| 0003b | 0003b7d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b7e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b7f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b800:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b810:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b820:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003b830:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b840:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b850:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003b860:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b870:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b880:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b890:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b8a0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003b8b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003b8c0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003b8d0:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003b8e0:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003b8f0:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003b900:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003b910:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003b920:·696e·7374·616c·6c5f·636d·643a·2064·6e66··install_cmd:·dnf | ||
| 0003b | 0003b930:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003b940:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003b950:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003b960:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003b970:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003b980:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003b990:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b | 0003b9a0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003b9b0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003b9c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003b9d0:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b | 0003b9e0:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b | 0003b9f0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b | 0003ba00:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b | 0003ba10:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b | 0003ba20:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003ba30:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b | 0003ba40:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b | 0003ba50:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b | 0003ba60:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b | 0003ba70:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b | 0003ba80:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b | 0003ba90:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b | 0003baa0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b | 0003bab0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b | 0003bac0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| Max diff block lines reached; 7239339/7265061 bytes (99.65%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | ····*·cpe:/o:fedoraproject:fedora:41 | 43 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:42 | 44 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:43 | 45 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:44 | 46 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 47 | ····*·cpe:/o:fedoraproject:fedora:45 | 47 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········3.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 99, 14 lines modified | Offset 99, 27 lines modified | ||
| 99 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 99 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 100 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 100 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 101 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 101 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 102 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 102 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 104 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 107 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 108 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 109 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 110 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 111 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 112 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 113 | fi | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 111 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 119 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 112 | ··set_fact: | 120 | ··set_fact: |
| Offset 233, 27 lines modified | Offset 246, 14 lines modified | ||
| 233 | ··-·PCI-DSSv4-11.5.2 | 246 | ··-·PCI-DSSv4-11.5.2 |
| 234 | ··-·high_complexity | 247 | ··-·high_complexity |
| 235 | ··-·high_severity | 248 | ··-·high_severity |
| 236 | ··-·medium_disruption | 249 | ··-·medium_disruption |
| 237 | ··-·no_reboot_needed | 250 | ··-·no_reboot_needed |
| 238 | ··-·restrict_strategy | 251 | ··-·restrict_strategy |
| 239 | ··-·rpm_verify_hashes | 252 | ··-·rpm_verify_hashes |
| 240 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 241 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 242 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 243 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 244 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 245 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 246 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 247 | fi | ||
| 248 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 253 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 249 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 254 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 250 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 255 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 251 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 256 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 252 | $·rpm·-qf·FILENAME | 257 | $·rpm·-qf·FILENAME |
| 253 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 258 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 274, 14 lines modified | Offset 274, 44 lines modified | ||
| 274 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 274 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 276 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 276 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 277 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 277 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 286 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 287 | declare·-A·SETPERMS_RPM_DICT | ||
| 288 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 289 | #·is·expected·by·the·RPM·database | ||
| 290 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 291 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 292 | do | ||
| 293 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 294 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 295 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 296 | ········do | ||
| 297 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 298 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 299 | ········done | ||
| 300 | done | ||
| 301 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 302 | #·correct·values | ||
| 303 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 304 | do | ||
| 305 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 306 | done | ||
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 286 | -·name:·Read·list·of·files·with·incorrect·permissions | 312 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 287 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 313 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 359, 44 lines modified | Offset 389, 14 lines modified | ||
| 359 | ··-·PCI-DSSv4-11.5.2 | 389 | ··-·PCI-DSSv4-11.5.2 |
| 360 | ··-·high_complexity | 390 | ··-·high_complexity |
| 361 | ··-·high_severity | 391 | ··-·high_severity |
| 362 | ··-·medium_disruption | 392 | ··-·medium_disruption |
| 363 | ··-·no_reboot_needed | 393 | ··-·no_reboot_needed |
| 364 | ··-·restrict_strategy | 394 | ··-·restrict_strategy |
| 365 | ··-·rpm_verify_permissions | 395 | ··-·rpm_verify_permissions |
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 678916/686978 bytes (98.83%) of diff not shown. | |||
| Offset 14332, 16 lines modified | Offset 14332, 16 lines modified | ||
| 00037fb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037fb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037fc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037fc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037fd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037fd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037fe0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037fe0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ff0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ff0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038000:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038000:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038010:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038010:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038020:·2020·2020·2028·6173·206f·6620·3230·323 | 00038020:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00038030:·2d31·3 | 00038030:·2d31·322d·3130·290a·2020·2020·2020·2020··-12-10).········ | ||
| 00038040:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038040:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038050:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038050:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038060:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038060:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038070:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038070:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038080:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038080:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038090:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038090:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000380a0:·5f67·726f·7570·5f61·7564·6974·696e·6722··_group_auditing" | 000380a0:·5f67·726f·7570·5f61·7564·6974·696e·6722··_group_auditing" |
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Apple·macOS·10.15 | 53 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Apple·macOS·10.15 |
| 54 | ··············Catalina | 54 | ··············Catalina |
| 55 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate | 55 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate |
| 56 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 56 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 57 | ····*·cpe:/o:apple:macos:10.15 | 57 | ····*·cpe:/o:apple:macos:10.15 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8i_\x8n_\x8g_\x8·_\x8w_\x8i_\x8t_\x8h_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8i_\x8n_\x8g_\x8·_\x8w_\x8i_\x8t_\x8h_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t |
| 63 | ·········1.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t_\x8d | 63 | ·········1.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t_\x8d |
| 64 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Group ·Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15· Group·contains | 65 | Group ·Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15· Group·contains |
| 66 | 2·groups·and·2·rules | 66 | 2·groups·and·2·rules |
| 67 | Group ·System·Accounting·with·audit· Group·contains·1·group·and·2·rules | 67 | Group ·System·Accounting·with·audit· Group·contains·1·group·and·2·rules |
| Offset 14601, 16 lines modified | Offset 14601, 16 lines modified | ||
| 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000390f0:·2028·6173·206f·6620·3230·323 | 000390f0:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00039100:·3 | 00039100:·3130·290a·2020·2020·2020·2020·2020·2020··10).············ | ||
| 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14602, 15 lines modified | Offset 14602, 15 lines modified | ||
| 00039090:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00039090:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 000390a0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 000390a0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 000390b0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 000390b0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000390c0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000390c0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000390d0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000390d0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000390e0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000390e0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000390f0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000390f0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00039100:·3 | 00039100:·352d·3132·2d31·3029·0a20·2020·2020·2020··5-12-10).······· | ||
| 00039110:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00039110:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00039120:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00039120:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039130:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039130:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039140:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039140:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039150:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039150:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039170:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00039170:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container | 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container |
| 77 | Platform·4· Group·contains·2·groups·and·1·rule | 77 | Platform·4· Group·contains·2·groups·and·1·rule |
| 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule | 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule |
| Offset 14601, 16 lines modified | Offset 14601, 16 lines modified | ||
| 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000390f0:·2028·6173·206f·6620·3230·323 | 000390f0:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00039100:·3 | 00039100:·3130·290a·2020·2020·2020·2020·2020·2020··10).············ | ||
| 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container | 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container |
| 77 | Platform·4· Group·contains·2·groups·and·1·rule | 77 | Platform·4· Group·contains·2·groups·and·1·rule |
| 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule | 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule |
| Offset 14601, 15 lines modified | Offset 14601, 15 lines modified | ||
| 00039080:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039080:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039090:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039090:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 000390a0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 000390a0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 000390b0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 000390b0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 000390c0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 000390c0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 000390d0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 000390d0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 000390e0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 000390f0:·6f66·2032·3032·3 | 000390f0:·6f66·2032·3032·352d·3132·2d31·3029·0a20··of·2025-12-10).· | ||
| 00039100:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039100:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00039110:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00039110:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00039120:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00039120:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00039130:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00039130:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00039140:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00039140:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00039150:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00039150:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00039160:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 00039160:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039170:·6173·206f·6620·3230·323 | 00039170:·6173·206f·6620·3230·3235·2d31·322d·3130··as·of·2025-12-10 | ||
| 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039170:·6173·206f·6620·3230·323 | 00039170:·6173·206f·6620·3230·3235·2d31·322d·3130··as·of·2025-12-10 | ||
| 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00039180:·6f66·2032·3032·3 | 00039180:·6f66·2032·3032·352d·3132·2d31·3029·0a20··of·2025-12-10).· | ||
| 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00039180:·6f66·2032·3032·3 | 00039180:·6f66·2032·3032·352d·3132·2d31·3029·0a20··of·2025-12-10).· | ||
| 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00039110:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00039120:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00039120:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00039130:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00039130:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039140:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039140:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039150:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039150:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039160:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039160:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039170:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039170:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039180:·3032·3 | 00039180:·3032·352d·3132·2d31·3029·0a20·2020·2020··025-12-10).····· | ||
| 00039190:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039190:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000391a0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000391a0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000391b0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000391b0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000391c0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000391c0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000391d0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000391d0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000391e0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000391e0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000391f0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000391f0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00039100:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00039110:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00039110:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00039120:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00039120:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00039130:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00039130:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00039140:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00039140:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039150:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039150:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039160:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039160:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039170:·6620·3230·323 | 00039170:·6620·3230·3235·2d31·322d·3130·290a·2020··f·2025-12-10).·· | ||
| 00039180:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039180:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039190:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039190:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000391a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000391a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000391b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000391b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000391c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000391c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000391d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000391d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000391e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 000391e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14603, 15 lines modified | Offset 14603, 15 lines modified | ||
| 000390a0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 000390a0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 000390b0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 000390b0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 000390c0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 000390c0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 000390d0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 000390d0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 000390e0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 000390e0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 000390f0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 000390f0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00039100:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00039100:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00039110:·3230·323 | 00039110:·3230·3235·2d31·322d·3130·290a·2020·2020··2025-12-10).···· | ||
| 00039120:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00039120:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00039130:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00039130:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00039140:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00039140:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00039150:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00039150:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00039160:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00039160:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00039170:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00039170:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00039180:·7465·6e74·5f67·726f·7570·5f6f·7065·6e73··tent_group_opens | 00039180:·7465·6e74·5f67·726f·7570·5f6f·7065·6e73··tent_group_opens |
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 75 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 76 | ·········4.·_\x8R_\x8o_\x8l_\x8e_\x8-_\x8b_\x8a_\x8s_\x8e_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 76 | ·········4.·_\x8R_\x8o_\x8l_\x8e_\x8-_\x8b_\x8a_\x8s_\x8e_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 77 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8R_\x8e_\x8g_\x8i_\x8s_\x8t_\x8r_\x8y_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8R_\x8e_\x8g_\x8i_\x8s_\x8t_\x8r_\x8y_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 000393f0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00039400:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00039400:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00039410:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00039410:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00039420:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00039420:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00039430:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00039430:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039440:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039440:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039450:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039450:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039460:·2032·3032·3 | 00039460:·2032·3032·352d·3132·2d31·3029·0a20·2020···2025-12-10).··· | ||
| 00039470:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039470:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039480:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039480:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039490:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039490:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 000394a0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 000394a0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000394b0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000394b0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000394c0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000394c0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000394d0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 000394d0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14655, 16 lines modified | Offset 14655, 16 lines modified | ||
| 000393e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000393e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000393f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000393f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00039400:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00039400:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00039410:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00039410:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00039420:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00039420:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00039430:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00039430:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00039440:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039440:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039450:·2020·2020·2861·7320·6f66·2032·3032·3 | 00039450:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00039460:·313 | 00039460:·3132·2d31·3029·0a20·2020·2020·2020·2020··12-10).········· | ||
| 00039470:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00039470:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00039480:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00039480:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00039490:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00039490:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 000394a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 000394a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000394b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000394b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000394c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000394c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000394d0:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" | 000394d0:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000393f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00039400:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00039400:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00039410:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00039410:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00039420:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00039420:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00039430:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00039430:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00039440:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00039440:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00039450:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00039450:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00039460:·206f·6620·3230·323 | 00039460:·206f·6620·3230·3235·2d31·322d·3130·290a···of·2025-12-10). | ||
| 00039470:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039470:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039480:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00039480:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00039490:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00039490:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000394a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000394a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000394b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000394b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000394c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000394c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000394d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o | 000394d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 000393f0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00039400:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00039400:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00039410:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00039410:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00039420:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00039420:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00039430:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00039430:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00039440:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00039440:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00039450:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00039450:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00039460:·323 | 00039460:·3235·2d31·322d·3130·290a·2020·2020·2020··25-12-10).······ | ||
| 00039470:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00039470:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00039480:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00039480:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00039490:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00039490:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000394a0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000394a0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000394b0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000394b0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000394c0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000394c0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000394d0:·6e74·5f67·726f·7570·5f6f·7065·6e73·6869··nt_group_openshi | 000394d0:·6e74·5f67·726f·7570·5f6f·7065·6e73·6869··nt_group_openshi |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00039400:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00039410:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00039410:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00039420:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00039420:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00039430:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00039430:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00039440:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00039440:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00039450:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00039450:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00039460:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00039460:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00039470:·7320·6f66·2032·3032·3 | 00039470:·7320·6f66·2032·3032·352d·3132·2d31·3029··s·of·2025-12-10) | ||
| 00039480:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00039480:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00039490:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00039490:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000394a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000394a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000394b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000394b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000394c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000394c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000394d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000394d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000394e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000394e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00039400:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00039410:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00039410:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00039420:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00039420:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039430:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039430:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039440:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039440:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039450:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039450:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039460:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039460:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039470:·3032·3 | 00039470:·3032·352d·3132·2d31·3029·0a20·2020·2020··025-12-10).····· | ||
| 00039480:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039480:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00039490:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00039490:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000394a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000394a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000394b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000394b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000394c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000394c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000394d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000394d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000394e0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000394e0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 16 lines modified | Offset 14657, 16 lines modified | ||
| 00039400:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039400:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039410:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039410:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00039420:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00039420:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00039430:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00039430:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00039440:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00039440:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00039450:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00039450:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00039460:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039460:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039470:·2028·6173·206f·6620·3230·323 | 00039470:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00039480:·3 | 00039480:·3130·290a·2020·2020·2020·2020·2020·2020··10).············ | ||
| 00039490:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039490:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000394a0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000394a0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000394b0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000394b0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000394c0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000394c0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000394d0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000394d0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000394e0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000394e0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 000394f0:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 000394f0:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00039400:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00039410:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00039410:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00039420:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00039420:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00039430:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00039430:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00039440:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00039440:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039450:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039450:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039460:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039460:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039470:·6620·3230·323 | 00039470:·6620·3230·3235·2d31·322d·3130·290a·2020··f·2025-12-10).·· | ||
| 00039480:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039480:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039490:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039490:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000394a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000394a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000394b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000394b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000394c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000394c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000394d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000394d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000394e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 000394e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14618, 16 lines modified | Offset 14618, 16 lines modified | ||
| 00039190:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039190:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 000391a0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 000391a0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000391b0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000391b0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000391c0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000391c0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000391d0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000391d0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000391e0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000391e0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039200:·2028·6173·206f·6620·3230·323 | 00039200:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00039210:·3 | 00039210:·3130·290a·2020·2020·2020·2020·2020·2020··10).············ | ||
| 00039220:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039220:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039230:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039230:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039240:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039240:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039250:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039250:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039260:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039260:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039270:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039270:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039280:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039280:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 77 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 79 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14618, 16 lines modified | Offset 14618, 16 lines modified | ||
| 00039190:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00039190:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000391a0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000391a0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000391b0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000391b0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 000391c0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 000391c0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 000391d0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 000391d0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 000391e0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 000391e0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039200:·2020·2020·2861·7320·6f66·2032·3032·3 | 00039200:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00039210:·313 | 00039210:·3132·2d31·3029·0a20·2020·2020·2020·2020··12-10).········· | ||
| 00039220:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00039220:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00039230:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00039230:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00039240:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00039240:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00039250:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00039250:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00039260:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00039260:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00039270:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00039270:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00039280:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" | 00039280:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" |
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 77 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 77 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 78 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 78 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 79 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 79 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039020:·2032·3032·3 | 00039020:·2032·3032·352d·3132·2d31·3029·0a20·2020···2025-12-10).··· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039020:·2032·3032·3 | 00039020:·2032·3032·352d·3132·2d31·3029·0a20·2020···2025-12-10).··· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8n_\x8e_\x8m_\x8e_\x8n_\x8t | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8n_\x8e_\x8m_\x8e_\x8n_\x8t |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039020:·6173·206f·6620·3230·323 | 00039020:·6173·206f·6620·3230·3235·2d31·322d·3130··as·of·2025-12-10 | ||
| 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039020:·6173·206f·6620·3230·323 | 00039020:·6173·206f·6620·3230·3235·2d31·322d·3130··as·of·2025-12-10 | ||
| 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038fb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038fc0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038fc0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038fd0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038fd0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038fe0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038fe0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038ff0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038ff0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039000:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039000:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039010:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039010:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039020:·6620·3230·323 | 00039020:·6620·3230·3235·2d31·322d·3130·290a·2020··f·2025-12-10).·· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039030:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039040:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039040:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00039050:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00039050:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00039060:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00039060:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00039070:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00039070:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00039080:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00039080:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00039090:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 00039090:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00039000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00039000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00039010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00039010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00039020:·3 | 00039020:·352d·3132·2d31·3029·0a20·2020·2020·2020··5-12-10).······· | ||
| 00039030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00039030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00039040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00039040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039090:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00039090:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fe0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fe0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038ff0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038ff0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00039000:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00039000:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00039010:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00039010:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039020:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039020:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039030:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039030:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039040:·2032·3032·3 | 00039040:·2032·3032·352d·3132·2d31·3029·0a20·2020···2025-12-10).··· | ||
| 00039050:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039050:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039060:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039060:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039070:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039070:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039080:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039080:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039090:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039090:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000390a0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000390a0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000390b0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 000390b0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14589, 16 lines modified | Offset 14589, 16 lines modified | ||
| 00038fc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038fc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038fd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038fd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038fe0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038fe0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038ff0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038ff0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00039000:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00039000:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00039010:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00039010:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00039020:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00039020:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00039030:·2020·2020·2028·6173·206f·6620·3230·323 | 00039030:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00039040:·2d31·3 | 00039040:·2d31·322d·3130·290a·2020·2020·2020·2020··-12-10).········ | ||
| 00039050:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00039050:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00039060:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00039060:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00039070:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00039070:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00039080:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00039080:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00039090:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00039090:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000390a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000390a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000390b0:·5f67·726f·7570·5f6f·7065·6e73·6869·6674··_group_openshift | 000390b0:·5f67·726f·7570·5f6f·7065·6e73·6869·6674··_group_openshift |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038fd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038fe0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038fe0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038ff0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038ff0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00039000:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00039000:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00039010:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00039010:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00039020:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00039020:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00039030:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00039040:·206f·6620·3230·323 | 00039040:·206f·6620·3230·3235·2d31·322d·3130·290a···of·2025-12-10). | ||
| 00039050:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039050:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039060:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00039060:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00039070:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00039070:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00039080:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00039080:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00039090:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00039090:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000390a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000390a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000390b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o | 000390b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o |
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038fd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038fe0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038fe0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038ff0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038ff0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039000:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039000:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039010:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039010:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039020:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039020:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039030:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039030:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039040:·3032·3 | 00039040:·3032·352d·3132·2d31·3029·0a20·2020·2020··025-12-10).····· | ||
| 00039050:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039050:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00039060:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00039060:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00039070:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00039070:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00039080:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00039080:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00039090:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00039090:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000390a0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000390a0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000390b0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000390b0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00037e50:·3 | 00037e50:·3129·0a20·2020·2020·2020·2020·2020·2020··1).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15053, 203 lines modified | Offset 15053, 203 lines modified | ||
| 0003acc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003acc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003acd0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | 0003acd0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | ||
| 0003ace0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ace0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003acf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003acf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ad00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ad00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ad10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ad10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ad20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ad20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ad30:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ad30:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003ad40:· | 0003ad40:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | ||
| 0003ad50:· | 0003ad50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003ad60:· | 0003ad60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003ad70:· | 0003ad70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003ad80:· | 0003ad80:·2269·646d·3536·3431·223e·3c74·6162·6c65··"idm5641"><table | ||
| 0003ad90:· | 0003ad90:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003ada0:· | 0003ada0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003adb0:·6 | 0003adb0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003adc0:· | 0003adc0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003add0:· | 0003add0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003ade0:· | 0003ade0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003adf0:· | 0003adf0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003ae00:· | 0003ae00:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003ae10:· | 0003ae10:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003ae20:· | 0003ae20:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003ae30:· | 0003ae30:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003ae40:· | 0003ae40:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003ae50:· | 0003ae50:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003ae60:· | 0003ae60:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003ae70:· | 0003ae70:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003ae80:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 0003ae90:·6464·3d61·6964·650a·3c2f·636f·6465·3e3c··dd=aide.</code>< | |||
| 0003aea0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003aeb0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003ae | 0003ae80:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | ||
| 0003ae90:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003aea0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003aeb0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003aec0:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003aed0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003aee0:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003aef0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003af00:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003af10:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003af20:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003af30:·6172·6765·743d·2223·6964·6d35·3634·3222··arget="#idm5642" | |||
| 0003af40:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003af50:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003af60:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003af70:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003af80:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003af90:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003afa0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003afb0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003afc0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003afd0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003afe0:·6964·3d22·6964·6d35·3634·3222·3e3c·7461··id="idm5642"><ta | |||
| 0003aff0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b000:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b010:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b020:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b030:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b040:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b050:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b060:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b070:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b080:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b090:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b0a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0b0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b0c0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b0d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b0e0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003b0f0:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003b100:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003b110:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 0003b120:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003b130:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003b140:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003b150:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0003b160:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003b170:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003b180:·656e·0a20·2020·2079·756d·2069·6e73·7461··en.····yum·insta | |||
| 0003b190:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 0003b1a0:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b1b0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b1c0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b1d0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b1e0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b1f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b200:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b210:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b220:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b230:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b240:·2223·6964·6d35·3634·3322·2074·6162·696e··"#idm5643"·tabin | |||
| 0003b250:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b260:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b270:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b280:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b290:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b2a0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b2b0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b2c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b2d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003 | 0003b2e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b2f0:·2269·646d·3536·3433·223e·3c74·6162·6c65··"idm5643"><table | |||
| 0003b300:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b310:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b320:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b330:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b340:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b350:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| Max diff block lines reached; 20282514/20310444 bytes (99.86%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 115, 33 lines modified | Offset 115, 41 lines modified | ||
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·--add=aide | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | include·install_aide | 127 | include·install_aide |
| 134 | class·install_aide·{ | 128 | class·install_aide·{ |
| 135 | ··package·{·'aide': | 129 | ··package·{·'aide': |
| 136 | ····ensure·=>·'installed', | 130 | ····ensure·=>·'installed', |
| 137 | ··} | 131 | ··} |
| 138 | } | 132 | } |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 140 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 141 | ····yum·install·-y·"aide" | ||
| 142 | fi | ||
| 143 | else | ||
| 144 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 145 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | -·name:·Ensure·aide·is·installed | 151 | -·name:·Ensure·aide·is·installed |
| 145 | ··package: | 152 | ··package: |
| Offset 161, 29 lines modified | Offset 169, 21 lines modified | ||
| 161 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 162 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 164 | [[packages]] | 172 | [[packages]] |
| 165 | name·=·"aide" | 173 | name·=·"aide" |
| 166 | version·=·"*" | 174 | version·=·"*" |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 174 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 175 | ····yum·install·-y·"aide" | ||
| 176 | fi | ||
| 180 | package·--add=aide | ||
| 177 | else | ||
| 178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 179 | fi | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 182 | $·sudo·/usr/sbin/aide·--init | 183 | $·sudo·/usr/sbin/aide·--init |
| 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 185 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 186 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 208, 14 lines modified | Offset 208, 28 lines modified | ||
| 208 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 208 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 209 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 218 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 219 | ····yum·install·-y·"aide" | ||
| 220 | fi | ||
| 221 | /usr/sbin/aide·--init | ||
| 222 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 223 | else | ||
| 224 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 225 | fi | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 220 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 231 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 221 | ··ansible.builtin.package: | 232 | ··ansible.builtin.package: |
| Offset 289, 28 lines modified | Offset 303, 14 lines modified | ||
| 289 | ··-·PCI-DSSv4-11.5.2 | 303 | ··-·PCI-DSSv4-11.5.2 |
| 290 | ··-·aide_build_database | 304 | ··-·aide_build_database |
| Max diff block lines reached; 1810383/1816066 bytes (99.69%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00037e50:·3 | 00037e50:·3129·0a20·2020·2020·2020·2020·2020·2020··1).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15060, 202 lines modified | Offset 15060, 202 lines modified | ||
| 0003ad30:·6765·743d·2223·6964·6d35·3634·3122·2074··get="#idm5641"·t | 0003ad30:·6765·743d·2223·6964·6d35·3634·3122·2074··get="#idm5641"·t | ||
| 0003ad40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ad40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ad50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ad50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ad60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ad60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ad70:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ad70:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ad80:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ad80:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ad90:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ad90:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ada0:·20 | 0003ada0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | ||
| 0003adb0:· | 0003adb0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003adc0:· | 0003adc0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003add0:·6 | 0003add0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003ade0:· | 0003ade0:·6964·3d22·6964·6d35·3634·3122·3e3c·7461··id="idm5641"><ta | ||
| 0003adf0:· | 0003adf0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003ae00:· | 0003ae00:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003ae10:· | 0003ae10:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003ae20:· | 0003ae20:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003ae30:· | 0003ae30:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003ae40:· | 0003ae40:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003ae50:· | 0003ae50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003ae60:· | 0003ae60:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003ae70:· | 0003ae70:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003ae80:· | 0003ae80:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003ae90:· | 0003ae90:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003aea0:· | 0003aea0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003aeb0:· | 0003aeb0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003aec0:· | 0003aec0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003aed0:· | 0003aed0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003aee0:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003aef0:·2d2d·6164·643d·6169·6465·0a3c·2f63·6f64··--add=aide.</cod | |||
| 0003af00:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003af10:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003a | 0003aee0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | ||
| 0003aef0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003af00:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003af10:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003af20:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003af30:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003af40:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003af50:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003af60:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003af70:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003af80:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003af90:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 0003afa0:·3432·2220·7461·6269·6e64·6578·3d22·3022··42"·tabindex="0" | |||
| 0003afb0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003afc0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003afd0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003afe0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003aff0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b000:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b010:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b020:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b030:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b040:·6522·2069·643d·2269·646d·3536·3432·223e··e"·id="idm5642"> | |||
| 0003b050:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b060:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b070:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b080:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b090:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b0a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b0b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b0c0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b0d0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b0e0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b0f0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b100:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b110:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b120:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b130:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b140:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003b150:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b160:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b170:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b180:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b190:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b1a0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b1b0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b1c0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003b1d0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003b1e0:·2074·6865·6e0a·2020·2020·7975·6d20·696e···then.····yum·in | |||
| 0003b1f0:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b200:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003b210:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b220:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b230:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b240:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b250:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b260:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b270:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b280:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b290:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b2a0:·6574·3d22·2369·646d·3536·3433·2220·7461··et="#idm5643"·ta | |||
| 0003b2b0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b2c0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b2d0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b2e0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b2f0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b300:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b310:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b320:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b330:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003 | 0003b340:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003af40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003af50:·6d35·3634·3222·2074·6162·696e·6465·783d··m5642"·tabindex= | |||
| 0003af60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003af70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003af80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003af90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003afa0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003afb0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| Max diff block lines reached; 20603397/20631189 bytes (99.87%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2861·7320·6f66·2032·3032·3 | 00037e50:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00037e60:·3 | 00037e60:·3129·0a20·2020·2020·2020·2020·2020·2020··1).············· | ||
| 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15044, 203 lines modified | Offset 15044, 203 lines modified | ||
| 0003ac30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ac30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ac40:·743d·2223·6964·6d35·3634·3122·2074·6162··t="#idm5641"·tab | 0003ac40:·743d·2223·6964·6d35·3634·3122·2074·6162··t="#idm5641"·tab | ||
| 0003ac50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ac50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ac60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ac60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ac70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ac70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ac80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ac80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ac90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ac90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003aca0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003aca0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | ||
| 0003acb0:· | 0003acb0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | ||
| 0003acc0:· | 0003acc0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003acd0:·6 | 0003acd0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003ace0:· | 0003ace0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003acf0:· | 0003acf0:·3d22·6964·6d35·3634·3122·3e3c·7461·626c··="idm5641"><tabl | ||
| 0003ad00:·6 | 0003ad00:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003ad10:· | 0003ad10:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003ad20:·6 | 0003ad20:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003ad30:·6 | 0003ad30:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003ad40:· | 0003ad40:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003ad50:· | 0003ad50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003ad60:· | 0003ad60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003ad70:· | 0003ad70:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003ad80:· | 0003ad80:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003ad90:· | 0003ad90:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003ada0:· | 0003ada0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003adb0:· | 0003adb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003adc0:· | 0003adc0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003add0:·6 | 0003add0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003ade0:· | 0003ade0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003adf0:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 0003ae00:·6164·643d·6169·6465·0a3c·2f63·6f64·653e··add=aide.</code> | |||
| 0003ae10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ae20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ae30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ae40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ae50:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003ae60:·3634·3222·2074·6162·696e·6465·783d·2230··642"·tabindex="0 | |||
| 0003ae70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ae80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ae90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003aea0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003aeb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003aec0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003aed0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003aee0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003aef0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003af00:·6170·7365·2220·6964·3d22·6964·6d35·3634··apse"·id="idm564 | |||
| 0003af10:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003af20:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003af30:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003af40:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003af50:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003a | 0003adf0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | ||
| 0003ae00:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003ae10:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003ae20:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003ae30:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003ae40:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003ae50:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003ae60:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ae70:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ae80:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ae90:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003aea0:·7461·7267·6574·3d22·2369·646d·3536·3432··target="#idm5642 | |||
| 0003aeb0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003aec0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003aed0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003aee0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003aef0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003af00:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003af10:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003af20:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003af30:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003af40:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af50:·2069·643d·2269·646d·3536·3432·223e·3c74···id="idm5642"><t | |||
| 0003af60:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003af70:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003af80:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003af90:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003afa0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003afb0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003afc0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003afd0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003af | 0003afe0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003af | 0003aff0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b000:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b010:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b020:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b030:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b040:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b050:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003b060:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b070:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b080:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 0003b090:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003b0a0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003b0b0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003b0c0:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 0003b0d0:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003b0e0:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003b0f0:·6865·6e0a·2020·2020·7975·6d20·696e·7374··hen.····yum·inst | |||
| 0003b100:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003b110:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b120:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b130:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b140:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b150:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b160:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b170:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b180:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b190:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| Max diff block lines reached; 8705625/8733555 bytes (99.68%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 33 lines modified | Offset 113, 41 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·--add=aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | include·install_aide | 125 | include·install_aide |
| 132 | class·install_aide·{ | 126 | class·install_aide·{ |
| 133 | ··package·{·'aide': | 127 | ··package·{·'aide': |
| 134 | ····ensure·=>·'installed', | 128 | ····ensure·=>·'installed', |
| 135 | ··} | 129 | ··} |
| 136 | } | 130 | } |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 138 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 139 | ····yum·install·-y·"aide" | ||
| 140 | fi | ||
| 141 | else | ||
| 142 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 143 | fi | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | -·name:·Ensure·aide·is·installed | 149 | -·name:·Ensure·aide·is·installed |
| 143 | ··package: | 150 | ··package: |
| Offset 159, 29 lines modified | Offset 167, 21 lines modified | ||
| 159 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | [[packages]] | 170 | [[packages]] |
| 163 | name·=·"aide" | 171 | name·=·"aide" |
| 164 | version·=·"*" | 172 | version·=·"*" |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 172 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 173 | ····yum·install·-y·"aide" | ||
| 174 | fi | ||
| 178 | package·--add=aide | ||
| 175 | else | ||
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 177 | fi | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 206, 14 lines modified | Offset 206, 28 lines modified | ||
| 206 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 206 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 209 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 209 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 214 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 215 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 216 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 217 | ····yum·install·-y·"aide" | ||
| 218 | fi | ||
| 219 | /usr/sbin/aide·--init | ||
| 220 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 221 | else | ||
| 222 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 223 | fi | ||
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 218 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 229 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 219 | ··ansible.builtin.package: | 230 | ··ansible.builtin.package: |
| Offset 287, 28 lines modified | Offset 301, 14 lines modified | ||
| 287 | ··-·PCI-DSSv4-11.5.2 | 301 | ··-·PCI-DSSv4-11.5.2 |
| 288 | ··-·aide_build_database | 302 | ··-·aide_build_database |
| Max diff block lines reached; 956393/962195 bytes (99.40%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037dd0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037de0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037de0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037df0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037df0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037e00:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037e00:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037e10:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037e10:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037e20:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037e20:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037e30:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e40:·6f66·2032·3032·3 | 00037e40:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037e50:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e60:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e60:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e70:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e70:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e80:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e80:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e90:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e90:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037ea0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037ea0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037eb0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037eb0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 14918, 203 lines modified | Offset 14918, 203 lines modified | ||
| 0003a450:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003a450:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003a460:·3130·3335·3022·2074·6162·696e·6465·783d··10350"·tabindex= | 0003a460:·3130·3335·3022·2074·6162·696e·6465·783d··10350"·tabindex= | ||
| 0003a470:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003a470:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003a480:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003a480:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003a490:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003a490:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003a4a0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003a4a0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003a4b0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003a4b0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003a4c0:·6564·6961·7469·6f6e·20 | 0003a4c0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003a4d0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003a4e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003a4f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003a500:·6170·7365·2220·6964·3d22·6964·6d31·3033··apse"·id="idm103 | |||
| 0003a510:·3530·223e·3c70·7265·3e3c·636f·6465·3e23··50"><pre><code># | |||
| 0003a520:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003a530:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003a540:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003a550:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | |||
| 0003a560:·6965·7420·2d71·2079·756d·3b20·7468·656e··iet·-q·yum;·then | |||
| 0003a570:·0a0a·2320·5374·7269·7020·616e·7920·7365··..#·Strip·any·se | |||
| 0003a580:·6172·6368·2063·6861·7261·6374·6572·7320··arch·characters· | |||
| 0003a590:·696e·2074·6865·206b·6579·2061·7267·2073··in·the·key·arg·s | |||
| 0003a5a0:·6f20·7468·6174·2074·6865·206b·6579·2063··o·that·the·key·c | |||
| 0003a5b0:·616e·2062·6520·7265·706c·6163·6564·2077··an·be·replaced·w | |||
| 0003a5c0:·6974·686f·7574·0a23·2061·6464·696e·6720··ithout.#·adding· | |||
| 0003a5d0:·616e·7920·7365·6172·6368·2063·6861·7261··any·search·chara | |||
| 0003a5e0:·6374·6572·7320·746f·2074·6865·2063·6f6e··cters·to·the·con | |||
| 0003a5f0:·6669·6720·6669·6c65·2e0a·7374·7269·7070··fig·file..stripp | |||
| 0003a600:·6564·5f6b·6579·3d24·2873·6564·2027·732f··ed_key=$(sed·'s/ | |||
| 0003a610:·5b5c·5e3d·5c24·2c3b·2b5d·2a2f·2f67·2720··[\^=\$,;+]*//g'· | |||
| 0003a620:·266c·743b·266c·743b·266c·743b·2022·5e67··<<<·"^g | |||
| 0003a630:·7067·6368·6563·6b22·290a·0a23·2073·6865··pgcheck")..#·she | |||
| 0003a640:·6c6c·6368·6563·6b20·6469·7361·626c·653d··llcheck·disable= | |||
| 0003a4d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a4e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a4f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a500:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003a510:·3130·3335·3022·3e3c·7461·626c·6520·636c··10350"><table·cl | |||
| 0003a520:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003a530:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003a540:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003a550:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003a560:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a570:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003a580:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003a590:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0003a5a0:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0003a5b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003a5c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a5d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003a5e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | |||
| 0003a5f0:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | |||
| 0003a600:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003a610:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003a620:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003a630:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003a640:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003a650:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003a660:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | |||
| 0003a670:·2e31·0a20·202d·2044·4953·412d·5354·4947··.1.··-·DISA-STIG | |||
| 0003a680:·2d4f·4c30·372d·3030·2d30·3230·3035·300a··-OL07-00-020050. | |||
| 0003a690:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003a6a0:·2d33·2e34·2e38·0a20·202d·204e·4953·542d··-3.4.8.··-·NIST- | |||
| 0003a6b0:·3830·302d·3533·2d43·4d2d·3131·2861·290a··800-53-CM-11(a). | |||
| 0003a6c0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003a6d0:·434d·2d31·3128·6229·0a20·202d·204e·4953··CM-11(b).··-·NIS | |||
| 0003a6e0:·542d·3830·302d·3533·2d43·4d2d·3528·3329··T-800-53-CM-5(3) | |||
| 0003a6f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003a700:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 0003a710:·542d·3830·302d·3533·2d53·412d·3132·0a20··T-800-53-SA-12.· | |||
| 0003a720:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003a730:·412d·3132·2831·3029·0a20·202d·204e·4953··A-12(10).··-·NIS | |||
| 0003a740:·542d·3830·302d·3533·2d53·432d·3132·0a20··T-800-53-SC-12.· | |||
| 0003a750:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003a760:·432d·3132·2833·290a·2020·2d20·4e49·5354··C-12(3).··-·NIST | |||
| 0003a770:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | |||
| 0003a780:·2050·4349·2d44·5353·2d52·6571·2d36·2e32···PCI-DSS-Req-6.2 | |||
| 0003a790:·0a20·202d·2050·4349·2d44·5353·7634·2d36··.··-·PCI-DSSv4-6 | |||
| 0003a7a0:·2e33·2e33·0a20·202d·2063·6f6e·6669·6775··.3.3.··-·configu | |||
| 0003a7b0:·7265·5f73·7472·6174·6567·790a·2020·2d20··re_strategy.··-· | |||
| 0003a7c0:·656e·7375·7265·5f67·7067·6368·6563·6b5f··ensure_gpgcheck_ | |||
| 0003a7d0:·676c·6f62·616c·6c79·5f61·6374·6976·6174··globally_activat | |||
| 0003a7e0:·6564·0a20·202d·2068·6967·685f·7365·7665··ed.··-·high_seve | |||
| 0003a7f0:·7269·7479·0a20·202d·206c·6f77·5f63·6f6d··rity.··-·low_com | |||
| 0003a800:·706c·6578·6974·790a·2020·2d20·6d65·6469··plexity.··-·medi | |||
| 0003a810:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | |||
| 0003a820:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a830:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003a840:·7265·2047·5047·2063·6865·636b·2069·7320··re·GPG·check·is· | |||
| 0003a850:·676c·6f62·616c·6c79·2061·6374·6976·6174··globally·activat | |||
| 0003a860:·6564·0a20·2069·6e69·5f66·696c·653a·0a20··ed.··ini_file:.· | |||
| 0003a870:·2020·2064·6573·743a·202f·6574·632f·7975·····dest:·/etc/yu | |||
| 0003a880:·6d2e·636f·6e66·0a20·2020·2073·6563·7469··m.conf.····secti | |||
| 0003a890:·6f6e·3a20·6d61·696e·0a20·2020·206f·7074··on:·main.····opt | |||
| 0003a8a0:·696f·6e3a·2067·7067·6368·6563·6b0a·2020··ion:·gpgcheck.·· | |||
| 0003a8b0:·2020·7661·6c75·653a·2031·0a20·2020·206e····value:·1.····n | |||
| 0003a8c0:·6f5f·6578·7472·615f·7370·6163·6573·3a20··o_extra_spaces:· | |||
| 0003a8d0:·7472·7565·0a20·2020·2063·7265·6174·653a··true.····create: | |||
| 0003a8e0:·2066·616c·7365·0a20·2077·6865·6e3a·2027···false.··when:·' | |||
| 0003a8f0:·2279·756d·2220·696e·2061·6e73·6962·6c65··"yum"·in·ansible | |||
| 0003a900:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003a910:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003a920:·532d·352e·3130·2e34·2e31·0a20·202d·2044··S-5.10.4.1.··-·D | |||
| 0003a930:·4953·412d·5354·4947·2d4f·4c30·372d·3030··ISA-STIG-OL07-00 | |||
| 0003a940:·2d30·3230·3035·300a·2020·2d20·4e49·5354··-020050.··-·NIST | |||
| 0003a950:·2d38·3030·2d31·3731·2d33·2e34·2e38·0a20··-800-171-3.4.8.· | |||
| 0003a960:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003a970:·4d2d·3131·2861·290a·2020·2d20·4e49·5354··M-11(a).··-·NIST | |||
| 0003a980:·2d38·3030·2d35·332d·434d·2d31·3128·6229··-800-53-CM-11(b) | |||
| 0003a990:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003a9a0:·2d43·4d2d·3528·3329·0a20·202d·204e·4953··-CM-5(3).··-·NIS | |||
| 0003a9b0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| Max diff block lines reached; 3300753/3328545 bytes (99.17%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 111, 14 lines modified | Offset 111, 42 lines modified | ||
| 111 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 111 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020050 | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020050 |
| 115 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 115 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221710r877463_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221710r877463_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·rpm·--quiet·-q·yum;·then | ||
| 121 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 122 | #·adding·any·search·characters·to·the·config·file. | ||
| 123 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 124 | #·shellcheck·disable=SC2059 | ||
| 125 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 126 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 127 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 128 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 129 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 130 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 131 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 132 | yum.conf" | ||
| 133 | else | ||
| 134 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 135 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 136 | ····fi | ||
| 137 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 123 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 148 | ··package_facts: |
| Offset 171, 42 lines modified | Offset 199, 14 lines modified | ||
| 171 | ··-·PCI-DSSv4-6.3.3 | 199 | ··-·PCI-DSSv4-6.3.3 |
| 172 | ··-·configure_strategy | 200 | ··-·configure_strategy |
| 173 | ··-·ensure_gpgcheck_globally_activated | 201 | ··-·ensure_gpgcheck_globally_activated |
| 174 | ··-·high_severity | 202 | ··-·high_severity |
| 175 | ··-·low_complexity | 203 | ··-·low_complexity |
| 176 | ··-·medium_disruption | 204 | ··-·medium_disruption |
| 177 | ··-·no_reboot_needed | 205 | ··-·no_reboot_needed |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·rpm·--quiet·-q·yum;·then | ||
| 181 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 182 | #·adding·any·search·characters·to·the·config·file. | ||
| 183 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 184 | #·shellcheck·disable=SC2059 | ||
| 185 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 186 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 187 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 188 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 189 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 190 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 191 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 192 | yum.conf" | ||
| 193 | else | ||
| 194 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 195 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 196 | ····fi | ||
| 197 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 198 | fi | ||
| 199 | else | ||
| 200 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 201 | fi | ||
| 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·f\x8fo\x8or\x8r·L\x8Lo\x8oc\x8ca\x8al\x8l·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·f\x8fo\x8or\x8r·L\x8Lo\x8oc\x8ca\x8al\x8l·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 203 | yum·should·be·configured·to·verify·the·signature(s)·of·local·packages·prior·to·installation. | 207 | yum·should·be·configured·to·verify·the·signature(s)·of·local·packages·prior·to·installation. |
| 204 | To·configure·yum·to·verify·signatures·of·local·packages,·set·the·localpkg_gpgcheck·to·1·in·/ | 208 | To·configure·yum·to·verify·signatures·of·local·packages,·set·the·localpkg_gpgcheck·to·1·in·/ |
| 205 | etc/yum.conf. | 209 | etc/yum.conf. |
| 206 | ············Changes·to·any·software·components·can·have·significant·effects·to·the·overall | 210 | ············Changes·to·any·software·components·can·have·significant·effects·to·the·overall |
| 207 | ············security·of·the·operating·system.·This·requirement·ensures·the·software·has·not | 211 | ············security·of·the·operating·system.·This·requirement·ensures·the·software·has·not |
| 208 | ············been·tampered·and·has·been·provided·by·a·trusted·vendor. | 212 | ············been·tampered·and·has·been·provided·by·a·trusted·vendor. |
| Offset 228, 14 lines modified | Offset 228, 42 lines modified | ||
| 228 | ············_\x8n_\x8i_\x8s_\x8t···········CM-11(a),·CM-11(b),·CM-6(a),·CM-5(3),·SA-12,·SA-12(10) | 228 | ············_\x8n_\x8i_\x8s_\x8t···········CM-11(a),·CM-11(b),·CM-6(a),·CM-5(3),·SA-12,·SA-12(10) |
| 229 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 229 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 230 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 230 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 231 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 231 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020060 | 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020060 |
| 233 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 233 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221711r877463_rule | 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221711r877463_rule |
| 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 236 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 237 | if·rpm·--quiet·-q·yum;·then | ||
| 238 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 239 | #·adding·any·search·characters·to·the·config·file. | ||
| 240 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^localpkg_gpgcheck") | ||
| 241 | #·shellcheck·disable=SC2059 | ||
| 242 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 243 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 244 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 245 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 246 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^localpkg_gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 247 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 248 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^localpkg_gpgcheck\\>.*/$escaped_formatted_output/ | ||
| 249 | gi"·"/etc/yum.conf" | ||
| Max diff block lines reached; 217212/224025 bytes (96.96%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037d80:·3032·3 | 00037d80:·3032·352d·3132·2d31·3129·0a20·2020·2020··025-12-11).····· | ||
| 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15122, 310 lines modified | Offset 15122, 310 lines modified | ||
| 0003b110:·2d74·6172·6765·743d·2223·6964·6d35·3239··-target="#idm529 | 0003b110:·2d74·6172·6765·743d·2223·6964·6d35·3239··-target="#idm529 | ||
| 0003b120:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003b120:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003b130:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b130:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b140:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b140:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b150:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b150:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b160:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b160:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b170:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b170:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b180:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b190:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b1a0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b1b0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b1c0:·2220·6964·3d22·6964·6d35·3239·3922·3e3c··"·id="idm5299">< | |||
| 0003b1d0:·7072·653e·3c63·6f64·653e·0a23·2046·696e··pre><code>.#·Fin | |||
| 0003b1e0:·6420·7768·6963·6820·6669·6c65·7320·6861··d·which·files·ha | |||
| 0003b1f0:·7665·2069·6e63·6f72·7265·6374·2068·6173··ve·incorrect·has | |||
| 0003b200:·6820·286e·6f74·2069·6e20·2f65·7463·2c20··h·(not·in·/etc,· | |||
| 0003b210:·6265·6361·7573·6520·6f66·2074·6865·2073··because·of·the·s | |||
| 0003b220:·7973·7465·6d20·7265·6c61·7465·6420·636f··ystem·related·co | |||
| 0003b230:·6e66·6967·2066·696c·6573·2920·616e·6420··nfig·files)·and· | |||
| 0003b240:·7468·656e·2067·6574·2066·696c·6573·206e··then·get·files·n | |||
| 0003b250:·616d·6573·0a66·696c·6573·5f77·6974·685f··ames.files_with_ | |||
| 0003b260:·696e·636f·7272·6563·745f·6861·7368·3d22··incorrect_hash=" | |||
| 0003b270:·2428·7270·6d20·2d56·6120·2d2d·6e6f·636f··$(rpm·-Va·--noco | |||
| 0003b280:·6e66·6967·207c·2067·7265·7020·2d45·2027··nfig·|·grep·-E·' | |||
| 0003b290:·5e2e·2e35·2720·7c20·6177·6b20·277b·7072··^..5'·|·awk·'{pr | |||
| 0003b2a0:·696e·7420·244e·467d·2720·2922·0a0a·6966··int·$NF}'·)"..if | |||
| 0003b2b0:·205b·202d·6e20·2224·6669·6c65·735f·7769···[·-n·"$files_wi | |||
| 0003b2c0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003b2d0:·6822·205d·3b20·7468·656e·0a20·2020·2023··h"·];·then.····# | |||
| 0003b2e0:·2046·726f·6d20·6669·6c65·7320·6e61·6d65···From·files·name | |||
| 0003b2f0:·7320·6765·7420·7061·636b·6167·6520·6e61··s·get·package·na | |||
| 0003b300:·6d65·7320·616e·6420·6368·616e·6765·206e··mes·and·change·n | |||
| 0003b310:·6577·6c69·6e65·2074·6f20·7370·6163·652c··ewline·to·space, | |||
| 0003b320:·2062·6563·6175·7365·2072·706d·2077·7269···because·rpm·wri | |||
| 0003b330:·7465·7320·6561·6368·2070·6163·6b61·6765··tes·each·package | |||
| 0003b340:·2074·6f20·6e65·7720·6c69·6e65·0a20·2020···to·new·line.··· | |||
| 0003b350:·2070·6163·6b61·6765·735f·746f·5f72·6569···packages_to_rei | |||
| 0003b360:·6e73·7461·6c6c·3d22·2428·7270·6d20·2d71··nstall="$(rpm·-q | |||
| 0003b370:·6620·2466·696c·6573·5f77·6974·685f·696e··f·$files_with_in | |||
| 0003b380:·636f·7272·6563·745f·6861·7368·207c·2074··correct_hash·|·t | |||
| 0003b390:·7220·275c·6e27·2027·2027·2922·0a0a·2020··r·'\n'·'·')"..·· | |||
| 0003b3a0:·2020·0a20·2020·2079·756d·2072·6569·6e73····.····yum·reins | |||
| 0003b3b0:·7461·6c6c·202d·7920·2470·6163·6b61·6765··tall·-y·$package | |||
| 0003b3c0:·735f·746f·5f72·6569·6e73·7461·6c6c·0a20··s_to_reinstall.· | |||
| 0003b3d0:·2020·200a·6669·0a3c·2f63·6f64·653e·3c2f·····.fi.</code></ | |||
| 0003b3e0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b3f0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b400:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b410:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b420:·2d74·6172·6765·743d·2223·6964·6d35·3330··-target="#idm530 | |||
| 0003b430:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003b440:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b450:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b460:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b470:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b480:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b | 0003b490:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003b | 0003b4a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b | 0003b4b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b | 0003b4c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b | 0003b4d0:·7073·6522·2069·643d·2269·646d·3533·3030··pse"·id="idm5300 | ||
| 0003b | 0003b4e0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b | 0003b4f0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b | 0003b500:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b | 0003b510:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b | 0003b520:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b | 0003b530:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b | 0003b540:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003b | 0003b550:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b | 0003b560:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003b | 0003b570:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b580:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b | 0003b590:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b | 0003b5a0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b | 0003b5b0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003b | 0003b5c0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003b | 0003b5d0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b2d0:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | |||
| 0003b2e0:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | |||
| 0003b2f0:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | |||
| 0003b300:·6d61·6e64·270a·2020·7365·745f·6661·6374··mand'.··set_fact | |||
| 0003b310:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | |||
| 0003b320:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | |||
| 0003b330:·636d·643a·2079·756d·2072·6569·6e73·7461··cmd:·yum·reinsta | |||
| 0003b340:·6c6c·202d·790a·2020·7768·656e·3a20·616e··ll·-y.··when:·an | |||
| 0003b350:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | |||
| 0003b360:·6f6e·2069·6e20·5b20·2246·6564·6f72·6122··on·in·[·"Fedora" | |||
| 0003b370:·2c20·2252·6564·4861·7422·2c20·2243·656e··,·"RedHat",·"Cen | |||
| 0003b380:·744f·5322·2c20·224f·7261·636c·654c·696e··tOS",·"OracleLin | |||
| 0003b390:·7578·2220·5d0a·2020·7461·6773·3a0a·2020··ux"·].··tags:.·· | |||
| 0003b3a0:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | |||
| 0003b3b0:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | |||
| 0003b3c0:·3037·2d30·302d·3031·3030·3230·0a20·202d··07-00-010020.··- | |||
| 0003b3d0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | |||
| 0003b3e0:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | |||
| 0003b3f0:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | |||
| 0003b400:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003b410:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | |||
| 0003b420:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | |||
| 0003b430:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b440:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | |||
| 0003b450:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | |||
| 0003b460:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | |||
| 0003b470:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b480:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | |||
| 0003b490:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b4a0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b4b0:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | |||
| 0003b4c0:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | |||
| 0003b4d0:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | |||
| 0003b4e0:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | |||
| Max diff block lines reached; 8576154/8595252 bytes (99.78%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:7 | 44 | ····*·cpe:/o:oracle:linux:7 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 98, 14 lines modified | Offset 98, 27 lines modified | ||
| 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 102 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 102 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 106 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 107 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 108 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 109 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 110 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 111 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 112 | fi | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 110 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 118 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 111 | ··set_fact: | 119 | ··set_fact: |
| Offset 237, 27 lines modified | Offset 250, 14 lines modified | ||
| 237 | ··-·PCI-DSSv4-11.5.2 | 250 | ··-·PCI-DSSv4-11.5.2 |
| 238 | ··-·high_complexity | 251 | ··-·high_complexity |
| 239 | ··-·high_severity | 252 | ··-·high_severity |
| 240 | ··-·medium_disruption | 253 | ··-·medium_disruption |
| 241 | ··-·no_reboot_needed | 254 | ··-·no_reboot_needed |
| 242 | ··-·restrict_strategy | 255 | ··-·restrict_strategy |
| 243 | ··-·rpm_verify_hashes | 256 | ··-·rpm_verify_hashes |
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 245 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 246 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 247 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 248 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 249 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 250 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 251 | fi | ||
| 252 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 257 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 253 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 258 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 254 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 259 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 255 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 260 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 256 | $·rpm·-qf·FILENAME | 261 | $·rpm·-qf·FILENAME |
| 257 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 262 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 280, 14 lines modified | Offset 280, 44 lines modified | ||
| 280 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 280 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 281 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 281 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 283 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 283 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 284 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 284 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 285 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 285 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 286 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 286 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 292 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 293 | declare·-A·SETPERMS_RPM_DICT | ||
| 294 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 295 | #·is·expected·by·the·RPM·database | ||
| 296 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 297 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 298 | do | ||
| 299 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 300 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 301 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 302 | ········do | ||
| 303 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 304 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 305 | ········done | ||
| 306 | done | ||
| 307 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 308 | #·correct·values | ||
| 309 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 310 | do | ||
| 311 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 312 | done | ||
| 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 292 | -·name:·Read·list·of·files·with·incorrect·permissions | 318 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 293 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 319 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 368, 44 lines modified | Offset 398, 14 lines modified | ||
| 368 | ··-·PCI-DSSv4-11.5.2 | 398 | ··-·PCI-DSSv4-11.5.2 |
| 369 | ··-·high_complexity | 399 | ··-·high_complexity |
| 370 | ··-·high_severity | 400 | ··-·high_severity |
| 371 | ··-·medium_disruption | 401 | ··-·medium_disruption |
| 372 | ··-·no_reboot_needed | 402 | ··-·no_reboot_needed |
| 373 | ··-·restrict_strategy | 403 | ··-·restrict_strategy |
| 374 | ··-·rpm_verify_permissions | 404 | ··-·rpm_verify_permissions |
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 840963/848750 bytes (99.08%) of diff not shown. | |||
| Offset 14330, 15 lines modified | Offset 14330, 15 lines modified | ||
| 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038000:·323 | 00038000:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15073, 232 lines modified | Offset 15073, 232 lines modified | ||
| 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ae10:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | 0003ae10:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | ||
| 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003ae80:· | 0003ae80:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | ||
| 0003ae90:· | 0003ae90:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003aea0:· | 0003aea0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003aeb0:· | 0003aeb0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003aec0:· | 0003aec0:·2269·646d·3631·3732·223e·3c74·6162·6c65··"idm6172"><table | ||
| 0003aed0:· | 0003aed0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003aee0:· | 0003aee0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003aef0:·6 | 0003aef0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003af00:· | 0003af00:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003af10:· | 0003af10:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003af20:· | 0003af20:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003af30:· | 0003af30:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003af40:· | 0003af40:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003af50:· | 0003af50:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003af60:· | 0003af60:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003af70:· | 0003af70:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003af80:· | 0003af80:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003af90:· | 0003af90:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003afa0:· | 0003afa0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003afb0:· | 0003afb0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003afc0:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 0003afd0:·6464·3d64·7261·6375·742d·6669·7073·0a3c··dd=dracut-fips.< | |||
| 0003afe0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003aff0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b000:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b010:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b020:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b030:·2223·6964·6d36·3137·3322·2074·6162·696e··"#idm6173"·tabin | |||
| 0003b040:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b050:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b060:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b070:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b080:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b090:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b0a0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b0b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b0c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b0d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b0e0:·6964·6d36·3137·3322·3e3c·7461·626c·6520··idm6173"><table· | |||
| 0003b0f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b100:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b110:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b120:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b130:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b140:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003 | 0003afc0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | ||
| 0003afd0:·6c5f·6472·6163·7574·2d66·6970·730a·0a63··l_dracut-fips..c | |||
| 0003afe0:·6c61·7373·2069·6e73·7461·6c6c·5f64·7261··lass·install_dra | |||
| 0003aff0:·6375·742d·6669·7073·207b·0a20·2070·6163··cut-fips·{.··pac | |||
| 0003b000:·6b61·6765·207b·2027·6472·6163·7574·2d66··kage·{·'dracut-f | |||
| 0003b010:·6970·7327·3a0a·2020·2020·656e·7375·7265··ips':.····ensure | |||
| 0003b020:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b030:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b040:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b050:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b060:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b070:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b080:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b090:·3631·3733·2220·7461·6269·6e64·6578·3d22··6173"·tabindex=" | |||
| 0003b0a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b0b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b0c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b0d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b0e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b0f0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b100:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b110:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b120:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b130:·7073·6522·2069·643d·2269·646d·3631·3733··pse"·id="idm6173 | |||
| 0003b140:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b150:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b160:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b170:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b180:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b1 | 0003b190:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b1 | 0003b1a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b180:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b190:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b1a0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b1b0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b1c0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b1d0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b1e0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b1f0:·5f64·7261·6375·742d·6669·7073·0a0a·636c··_dracut-fips..cl | |||
| 0003b200:·6173·7320·696e·7374·616c·6c5f·6472·6163··ass·install_drac | |||
| 0003b210:·7574·2d66·6970·7320·7b0a·2020·7061·636b··ut-fips·{.··pack | |||
| 0003b220:·6167·6520·7b20·2764·7261·6375·742d·6669··age·{·'dracut-fi | |||
| 0003b230:·7073·273a·0a20·2020·2065·6e73·7572·6520··ps':.····ensure· | |||
| 0003b240:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b250:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b260:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b270:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b280:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b290:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b2a0:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003b2b0:·3137·3422·2074·6162·696e·6465·783d·2230··174"·tabindex="0 | |||
| 0003b2c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b2d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b2e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b2f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b300:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b310:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b320:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| Max diff block lines reached; 5849286/5881080 bytes (99.46%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and |
| 51 | ··············Organizations·(NIST·800-171) | 51 | ··············Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:7 | 54 | ····*·cpe:/o:oracle:linux:7 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 99, 33 lines modified | Offset 99, 41 lines modified | ||
| 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 111 | package·--add=dracut-fips | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | include·install_dracut-fips | 111 | include·install_dracut-fips |
| 118 | class·install_dracut-fips·{ | 112 | class·install_dracut-fips·{ |
| 119 | ··package·{·'dracut-fips': | 113 | ··package·{·'dracut-fips': |
| 120 | ····ensure·=>·'installed', | 114 | ····ensure·=>·'installed', |
| 121 | ··} | 115 | ··} |
| 122 | } | 116 | } |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 123 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 124 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 125 | ····yum·install·-y·"dracut-fips" | ||
| 126 | fi | ||
| 127 | else | ||
| 128 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 129 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Ensure·dracut-fips·is·installed | 135 | -·name:·Ensure·dracut-fips·is·installed |
| 129 | ··package: | 136 | ··package: |
| Offset 152, 29 lines modified | Offset 160, 21 lines modified | ||
| 152 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 153 | ··-·package_dracut-fips_installed | 161 | ··-·package_dracut-fips_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | [[packages]] | 163 | [[packages]] |
| 156 | name·=·"dracut-fips" | 164 | name·=·"dracut-fips" |
| 157 | version·=·"*" | 165 | version·=·"*" |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 164 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 171 | package·--add=dracut-fips | ||
| 165 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 166 | ····yum·install·-y·"dracut-fips" | ||
| 167 | fi | ||
| 168 | else | ||
| 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 170 | fi | ||
| 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 172 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 173 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 173 | $·sudo·yum·install·dracut-fips | 174 | $·sudo·yum·install·dracut-fips |
| 174 | dracut·-f | 175 | dracut·-f |
| 175 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 176 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 176 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 177 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 177 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 178 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 202, 17 lines modified | Offset 202, 80 lines modified | ||
| 202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule | 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 210 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 211 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·rpm·--quiet·-q·grub2-common;·};·then | ||
| 210 | 212 | #·prelink·not·installed | |
| 213 | if·test·-e·/etc/sysconfig/prelink·-o·-e·/usr/sbin/prelink;·then | ||
| 214 | ····if·grep·-q·^PRELINKING·/etc/sysconfig/prelink | ||
| 215 | ····then | ||
| 216 | ········sed·-i·'s/^PRELINKING[:blank:]*=[:blank:]*[:alpha:]*/PRELINKING=no/'·/etc/sysconfig/prelink | ||
| 217 | ····else | ||
| 218 | ········printf·'\n'·>>·/etc/sysconfig/prelink | ||
| 219 | ········printf·'%s\n'·'#·Set·PRELINKING=no·per·security·requirements'·'PRELINKING=no'·>>·/etc/sysconfig/prelink | ||
| 220 | ····fi | ||
| 221 | ····#·Undo·previous·prelink·changes·to·binaries·if·prelink·is·available. | ||
| 222 | ····if·test·-x·/usr/sbin/prelink;·then | ||
| 223 | ········/usr/sbin/prelink·-ua | ||
| 224 | ····fi | ||
| 225 | fi | ||
| 226 | if·grep·-q·-m1·-o·aes·/proc/cpuinfo;·then | ||
| 227 | » if·!·rpm·-q·--quiet·"dracut-fips-aesni"·;·then | ||
| 228 | ····yum·install·-y·"dracut-fips-aesni" | ||
| 229 | fi | ||
| Max diff block lines reached; 677070/685817 bytes (98.72%) of diff not shown. | |||
| Offset 14297, 16 lines modified | Offset 14297, 16 lines modified | ||
| 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037df0:·2020·2861·7320·6f66·2032·3032·3 | 00037df0:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 00037e00:·2d3 | 00037e00:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15153, 309 lines modified | Offset 15153, 309 lines modified | ||
| 0003b300:·6765·743d·2223·6964·6d35·3239·3922·2074··get="#idm5299"·t | 0003b300:·6765·743d·2223·6964·6d35·3239·3922·2074··get="#idm5299"·t | ||
| 0003b310:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b310:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b320:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b320:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b330:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b330:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b340:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b340:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b350:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b350:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b360:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b360:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b370:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b380:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b390:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b3a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b3b0:·3d22·6964·6d35·3239·3922·3e3c·7072·653e··="idm5299"><pre> | |||
| 0003b3c0:·3c63·6f64·653e·0a23·2046·696e·6420·7768··<code>.#·Find·wh | |||
| 0003b3d0:·6963·6820·6669·6c65·7320·6861·7665·2069··ich·files·have·i | |||
| 0003b3e0:·6e63·6f72·7265·6374·2068·6173·6820·286e··ncorrect·hash·(n | |||
| 0003b3f0:·6f74·2069·6e20·2f65·7463·2c20·6265·6361··ot·in·/etc,·beca | |||
| 0003b400:·7573·6520·6f66·2074·6865·2073·7973·7465··use·of·the·syste | |||
| 0003b410:·6d20·7265·6c61·7465·6420·636f·6e66·6967··m·related·config | |||
| 0003b420:·2066·696c·6573·2920·616e·6420·7468·656e···files)·and·then | |||
| 0003b430:·2067·6574·2066·696c·6573·206e·616d·6573···get·files·names | |||
| 0003b440:·0a66·696c·6573·5f77·6974·685f·696e·636f··.files_with_inco | |||
| 0003b450:·7272·6563·745f·6861·7368·3d22·2428·7270··rrect_hash="$(rp | |||
| 0003b460:·6d20·2d56·6120·2d2d·6e6f·636f·6e66·6967··m·-Va·--noconfig | |||
| 0003b470:·207c·2067·7265·7020·2d45·2027·5e2e·2e35···|·grep·-E·'^..5 | |||
| 0003b480:·2720·7c20·6177·6b20·277b·7072·696e·7420··'·|·awk·'{print· | |||
| 0003b490:·244e·467d·2720·2922·0a0a·6966·205b·202d··$NF}'·)"..if·[·- | |||
| 0003b4a0:·6e20·2224·6669·6c65·735f·7769·7468·5f69··n·"$files_with_i | |||
| 0003b4b0:·6e63·6f72·7265·6374·5f68·6173·6822·205d··ncorrect_hash"·] | |||
| 0003b4c0:·3b20·7468·656e·0a20·2020·2023·2046·726f··;·then.····#·Fro | |||
| 0003b4d0:·6d20·6669·6c65·7320·6e61·6d65·7320·6765··m·files·names·ge | |||
| 0003b4e0:·7420·7061·636b·6167·6520·6e61·6d65·7320··t·package·names· | |||
| 0003b4f0:·616e·6420·6368·616e·6765·206e·6577·6c69··and·change·newli | |||
| 0003b500:·6e65·2074·6f20·7370·6163·652c·2062·6563··ne·to·space,·bec | |||
| 0003b510:·6175·7365·2072·706d·2077·7269·7465·7320··ause·rpm·writes· | |||
| 0003b520:·6561·6368·2070·6163·6b61·6765·2074·6f20··each·package·to· | |||
| 0003b530:·6e65·7720·6c69·6e65·0a20·2020·2070·6163··new·line.····pac | |||
| 0003b540:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003b550:·6c6c·3d22·2428·7270·6d20·2d71·6620·2466··ll="$(rpm·-qf·$f | |||
| 0003b560:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003b570:·6563·745f·6861·7368·207c·2074·7220·275c··ect_hash·|·tr·'\ | |||
| 0003b580:·6e27·2027·2027·2922·0a0a·2020·2020·0a20··n'·'·')"..····.· | |||
| 0003b590:·2020·2079·756d·2072·6569·6e73·7461·6c6c·····yum·reinstall | |||
| 0003b5a0:·202d·7920·2470·6163·6b61·6765·735f·746f···-y·$packages_to | |||
| 0003b5b0:·5f72·6569·6e73·7461·6c6c·0a20·2020·200a··_reinstall.····. | |||
| 0003b5c0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003b5d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b5e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b5f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b600:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b610:·6765·743d·2223·6964·6d35·3330·3022·2074··get="#idm5300"·t | |||
| 0003b620:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b630:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b640:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b650:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b660:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b670:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b | 0003b680:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b | 0003b690:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b6a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b6b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003b6c0:·2069·643d·2269·646d·3533·3030·223e·3c74···id="idm5300"><t | ||
| 0003b | 0003b6d0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003b6e0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003b6f0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003b700:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003b710:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b | 0003b720:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003b | 0003b730:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b740:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b | 0003b750:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003b | 0003b760:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003b770:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003b780:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003b790:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003b7a0:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003b | 0003b7b0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b | 0003b7c0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003b4c0:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | |||
| 0003b4d0:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | |||
| 0003b4e0:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | |||
| 0003b4f0:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | |||
| 0003b500:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | |||
| 0003b510:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | |||
| 0003b520:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | |||
| 0003b530:·790a·2020·7768·656e·3a20·616e·7369·626c··y.··when:·ansibl | |||
| 0003b540:·655f·6469·7374·7269·6275·7469·6f6e·2069··e_distribution·i | |||
| 0003b550:·6e20·5b20·2246·6564·6f72·6122·2c20·2252··n·[·"Fedora",·"R | |||
| 0003b560:·6564·4861·7422·2c20·2243·656e·744f·5322··edHat",·"CentOS" | |||
| 0003b570:·2c20·224f·7261·636c·654c·696e·7578·2220··,·"OracleLinux"· | |||
| 0003b580:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b590:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | |||
| 0003b5a0:·4449·5341·2d53·5449·472d·4f4c·3037·2d30··DISA-STIG-OL07-0 | |||
| 0003b5b0:·302d·3031·3030·3230·0a20·202d·204e·4953··0-010020.··-·NIS | |||
| 0003b5c0:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | |||
| 0003b5d0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003b5e0:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | |||
| 0003b5f0:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | |||
| 0003b600:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b610:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | |||
| 0003b620:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | |||
| 0003b630:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b640:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | |||
| 0003b650:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | |||
| 0003b660:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003b670:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | |||
| 0003b680:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b690:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b6a0:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | |||
| 0003b6b0:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | |||
| 0003b6c0:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| Max diff block lines reached; 5982155/6001391 bytes (99.68%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:oracle:linux:7 | 45 | ····*·cpe:/o:oracle:linux:7 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 104, 14 lines modified | Offset 104, 27 lines modified | ||
| 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 108 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 108 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 113 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 114 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 115 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 116 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 117 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 118 | fi | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 116 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 124 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 117 | ··set_fact: | 125 | ··set_fact: |
| Offset 243, 27 lines modified | Offset 256, 14 lines modified | ||
| 243 | ··-·PCI-DSSv4-11.5.2 | 256 | ··-·PCI-DSSv4-11.5.2 |
| 244 | ··-·high_complexity | 257 | ··-·high_complexity |
| 245 | ··-·high_severity | 258 | ··-·high_severity |
| 246 | ··-·medium_disruption | 259 | ··-·medium_disruption |
| 247 | ··-·no_reboot_needed | 260 | ··-·no_reboot_needed |
| 248 | ··-·restrict_strategy | 261 | ··-·restrict_strategy |
| 249 | ··-·rpm_verify_hashes | 262 | ··-·rpm_verify_hashes |
| 250 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 251 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 252 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 253 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 254 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 255 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 256 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 257 | fi | ||
| 258 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 263 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 259 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 264 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 260 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 265 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 261 | run·the·following·command·to·determine·which·package·owns·it: | 266 | run·the·following·command·to·determine·which·package·owns·it: |
| 262 | $·rpm·-qf·FILENAME | 267 | $·rpm·-qf·FILENAME |
| 263 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 268 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 264 | $·sudo·rpm·--setugids·PACKAGENAME | 269 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 284, 14 lines modified | Offset 284, 40 lines modified | ||
| 284 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 284 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 285 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 285 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 286 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 286 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 287 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 287 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 288 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 288 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 290 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 290 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 296 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 297 | declare·-A·SETPERMS_RPM_DICT | ||
| 298 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 299 | #·is·expected·by·the·RPM·database | ||
| 300 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 301 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 302 | do | ||
| 303 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 304 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 305 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 306 | done | ||
| 307 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 308 | #·correct·values | ||
| 309 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 310 | do | ||
| 311 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 312 | done | ||
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 296 | -·name:·Read·list·of·files·with·incorrect·ownership | 318 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 297 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 319 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 369, 40 lines modified | Offset 395, 14 lines modified | ||
| 369 | ··-·PCI-DSSv4-11.5.2 | 395 | ··-·PCI-DSSv4-11.5.2 |
| 370 | ··-·high_complexity | 396 | ··-·high_complexity |
| 371 | ··-·high_severity | 397 | ··-·high_severity |
| 372 | ··-·medium_disruption | 398 | ··-·medium_disruption |
| 373 | ··-·no_reboot_needed | 399 | ··-·no_reboot_needed |
| 374 | ··-·restrict_strategy | 400 | ··-·restrict_strategy |
| 375 | ··-·rpm_verify_ownership | 401 | ··-·rpm_verify_ownership |
| 376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 377 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 378 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 379 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 380 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 381 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 637886/645265 bytes (98.86%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3235·2d31·322d·3131·290a·2020··f·2025-12-11).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15184, 310 lines modified | Offset 15184, 310 lines modified | ||
| 0003b4f0:·7461·7267·6574·3d22·2369·646d·3532·3939··target="#idm5299 | 0003b4f0:·7461·7267·6574·3d22·2369·646d·3532·3939··target="#idm5299 | ||
| 0003b500:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b500:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b510:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b510:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b520:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b520:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b530:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b530:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b540:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b540:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b550:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b550:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b560:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b570:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b580:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b590:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b5a0:·2069·643d·2269·646d·3532·3939·223e·3c70···id="idm5299"><p | |||
| 0003b5b0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003b5c0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003b5d0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003b5e0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003b5f0:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003b600:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003b610:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003b620:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003b630:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003b640:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003b650:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003b660:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003b670:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003b680:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003b690:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003b6a0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b6b0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003b6c0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003b6d0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003b6e0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003b6f0:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003b700:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003b710:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003b720:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003b730:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003b740:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003b750:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003b760:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003b770:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003b780:·200a·2020·2020·7975·6d20·7265·696e·7374···.····yum·reinst | |||
| 0003b790:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003b7a0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003b7b0:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003b7c0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b7d0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b7e0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b7f0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b800:·7461·7267·6574·3d22·2369·646d·3533·3030··target="#idm5300 | |||
| 0003b810:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b820:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b830:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b840:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b850:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b860:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003b870:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003b | 0003b880:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b | 0003b890:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b8a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b8b0:·7365·2220·6964·3d22·6964·6d35·3330·3022··se"·id="idm5300" | ||
| 0003b | 0003b8c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003b8d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b8e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b8f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b900:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b910:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003b | 0003b920:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003b | 0003b930:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003b940:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003b | 0003b950:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b960:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003b970:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003b980:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003b990:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b | 0003b9a0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b | 0003b9b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b6b0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | |||
| 0003b6c0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | |||
| 0003b6d0:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | |||
| 0003b6e0:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | |||
| 0003b6f0:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | |||
| 0003b700:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | |||
| 0003b710:·6d64·3a20·7975·6d20·7265·696e·7374·616c··md:·yum·reinstal | |||
| 0003b720:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | |||
| 0003b730:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | |||
| 0003b740:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | |||
| 0003b750:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | |||
| 0003b760:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | |||
| 0003b770:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | |||
| 0003b780:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | |||
| 0003b790:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | |||
| 0003b7a0:·372d·3030·2d30·3130·3032·300a·2020·2d20··7-00-010020.··-· | |||
| 0003b7b0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | |||
| 0003b7c0:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | |||
| 0003b7d0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | |||
| 0003b7e0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | |||
| 0003b7f0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b800:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | |||
| 0003b810:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | |||
| 0003b820:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b830:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | |||
| 0003b840:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | |||
| 0003b850:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b860:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | |||
| 0003b870:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b880:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b890:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | |||
| 0003b8a0:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | |||
| 0003b8b0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | |||
| 0003b8c0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | |||
| Max diff block lines reached; 15941527/15960625 bytes (99.88%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:7 | 50 | ····*·cpe:/o:oracle:linux:7 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 111, 14 lines modified | Offset 111, 27 lines modified | ||
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 131 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 124 | ··set_fact: | 132 | ··set_fact: |
| Offset 250, 27 lines modified | Offset 263, 14 lines modified | ||
| 250 | ··-·PCI-DSSv4-11.5.2 | 263 | ··-·PCI-DSSv4-11.5.2 |
| 251 | ··-·high_complexity | 264 | ··-·high_complexity |
| 252 | ··-·high_severity | 265 | ··-·high_severity |
| 253 | ··-·medium_disruption | 266 | ··-·medium_disruption |
| 254 | ··-·no_reboot_needed | 267 | ··-·no_reboot_needed |
| 255 | ··-·restrict_strategy | 268 | ··-·restrict_strategy |
| 256 | ··-·rpm_verify_hashes | 269 | ··-·rpm_verify_hashes |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 258 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 259 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 260 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 261 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 262 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 263 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 264 | fi | ||
| 265 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 266 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 271 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 267 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 272 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 268 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 273 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 269 | $·rpm·-qf·FILENAME | 274 | $·rpm·-qf·FILENAME |
| 270 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 293, 14 lines modified | Offset 293, 44 lines modified | ||
| 293 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 293 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 294 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 294 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 296 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 296 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 297 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 297 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 298 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 298 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 299 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 299 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 301 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 302 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 303 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 304 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 305 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 306 | declare·-A·SETPERMS_RPM_DICT | ||
| 307 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 308 | #·is·expected·by·the·RPM·database | ||
| 309 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 310 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 311 | do | ||
| 312 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 313 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 314 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 315 | ········do | ||
| 316 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 317 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 318 | ········done | ||
| 319 | done | ||
| 320 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 321 | #·correct·values | ||
| 322 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 323 | do | ||
| 324 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 325 | done | ||
| 300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 301 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 302 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 303 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 304 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 305 | -·name:·Read·list·of·files·with·incorrect·permissions | 331 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 306 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 332 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 381, 44 lines modified | Offset 411, 14 lines modified | ||
| 381 | ··-·PCI-DSSv4-11.5.2 | 411 | ··-·PCI-DSSv4-11.5.2 |
| 382 | ··-·high_complexity | 412 | ··-·high_complexity |
| 383 | ··-·high_severity | 413 | ··-·high_severity |
| 384 | ··-·medium_disruption | 414 | ··-·medium_disruption |
| 385 | ··-·no_reboot_needed | 415 | ··-·no_reboot_needed |
| 386 | ··-·restrict_strategy | 416 | ··-·restrict_strategy |
| 387 | ··-·rpm_verify_permissions | 417 | ··-·rpm_verify_permissions |
| 388 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 389 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 390 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1204183/1211932 bytes (99.36%) of diff not shown. | |||
| Offset 14368, 15 lines modified | Offset 14368, 15 lines modified | ||
| 000381f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000381f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038200:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038200:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038210:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038210:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038220:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038220:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038230:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038230:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038240:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038240:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038250:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038250:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038260:·206f·6620·3230·323 | 00038260:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00038270:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038270:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038280:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038280:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038290:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038290:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000382a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000382a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000382b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000382b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000382c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000382c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000382d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000382d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15258, 310 lines modified | Offset 15258, 310 lines modified | ||
| 0003b990:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b990:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b9a0:·3239·3922·2074·6162·696e·6465·783d·2230··299"·tabindex="0 | 0003b9a0:·3239·3922·2074·6162·696e·6465·783d·2230··299"·tabindex="0 | ||
| 0003b9b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b9b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b9c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b9c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b9d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b9d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b9e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b9e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b9f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b9f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003ba00:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003ba10:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003ba20:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ba30:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ba40:·7365·2220·6964·3d22·6964·6d35·3239·3922··se"·id="idm5299" | |||
| 0003ba50:·3e3c·7072·653e·3c63·6f64·653e·0a23·2046··><pre><code>.#·F | |||
| 0003ba60:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | |||
| 0003ba70:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | |||
| 0003ba80:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | |||
| 0003ba90:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | |||
| 0003baa0:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | |||
| 0003bab0:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | |||
| 0003bac0:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | |||
| 0003bad0:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | |||
| 0003bae0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003baf0:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | |||
| 0003bb00:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | |||
| 0003bb10:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | |||
| 0003bb20:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | |||
| 0003bb30:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | |||
| 0003bb40:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003bb50:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | |||
| 0003bb60:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | |||
| 0003bb70:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | |||
| 0003bb80:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | |||
| 0003bb90:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | |||
| 0003bba0:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | |||
| 0003bbb0:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | |||
| 0003bbc0:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | |||
| 0003bbd0:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | |||
| 0003bbe0:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | |||
| 0003bbf0:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | |||
| 0003bc00:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | |||
| 0003bc10:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | |||
| 0003bc20:·2020·2020·0a20·2020·2079·756d·2072·6569······.····yum·rei | |||
| 0003bc30:·6e73·7461·6c6c·202d·7920·2470·6163·6b61··nstall·-y·$packa | |||
| 0003bc40:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | |||
| 0003bc50:·0a20·2020·200a·6669·0a3c·2f63·6f64·653e··.····.fi.</code> | |||
| 0003bc60:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bc70:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bc80:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bc90:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bca0:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003bcb0:·3330·3022·2074·6162·696e·6465·783d·2230··300"·tabindex="0 | |||
| 0003bcc0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bcd0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bce0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bcf0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bd00:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b | 0003bd10:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003b | 0003bd20:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b | 0003bd30:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b | 0003bd40:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b | 0003bd50:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | ||
| 0003b | 0003bd60:·3030·223e·3c74·6162·6c65·2063·6c61·7373··00"><table·class | ||
| 0003b | 0003bd70:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b | 0003bd80:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b | 0003bd90:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b | 0003bda0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b | 0003bdb0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b | 0003bdc0:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003b | 0003bdd0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003bde0:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003b | 0003bdf0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003b | 0003be00:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b | 0003be10:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b | 0003be20:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003be30:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003b | 0003be40:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003b | 0003be50:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b | 0003be60:·653e·2d20·6e61·6d65·3a20·2753·6574·2066··e>-·name:·'Set·f | ||
| 0003b | 0003be70:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | ||
| 0003b | 0003be80:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | ||
| 0003b | 0003be90:·6f6d·6d61·6e64·270a·2020·7365·745f·6661··ommand'.··set_fa | ||
| 0003b | 0003bea0:·6374·3a0a·2020·2020·7061·636b·6167·655f··ct:.····package_ | ||
| 0003b | 0003beb0:·6d61·6e61·6765·725f·7265·696e·7374·616c··manager_reinstal | ||
| 0003b | 0003bec0:·6c5f·636d·643a·2079·756d·2072·6569·6e73··l_cmd:·yum·reins | ||
| 0003b | 0003bed0:·7461·6c6c·202d·790a·2020·7768·656e·3a20··tall·-y.··when:· | ||
| 0003b | 0003bee0:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| 0003b | 0003bef0:·7469·6f6e·2069·6e20·5b20·2246·6564·6f72··tion·in·[·"Fedor | ||
| 0003b | 0003bf00:·6122·2c20·2252·6564·4861·7422·2c20·2243··a",·"RedHat",·"C | ||
| 0003b | 0003bf10:·656e·744f·5322·2c20·224f·7261·636c·654c··entOS",·"OracleL | ||
| 0003b | 0003bf20:·696e·7578·2220·5d0a·2020·7461·6773·3a0a··inux"·].··tags:. | ||
| 0003b | 0003bf30:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003b | 0003bf40:·310a·2020·2d20·4449·5341·2d53·5449·472d··1.··-·DISA-STIG- | ||
| 0003b | 0003bf50:·4f4c·3037·2d30·302d·3031·3030·3230·0a20··OL07-00-010020.· | ||
| 0003b | 0003bf60:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003bf70:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003b | 0003bf80:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003b | 0003bf90:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003b | 0003bfa0:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003b | 0003bfb0:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003b | 0003bfc0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b | 0003bfd0:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003b | 0003bfe0:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003b | 0003bff0:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003 | 0003c000:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003 | 0003c010:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003 | 0003c020:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003 | 0003c030:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003 | 0003c040:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003 | 0003c050:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003 | 0003c060:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003 | 0003c070:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| Max diff block lines reached; 26243813/26286371 bytes (99.84%) of diff not shown. | |||
| Offset 14305, 15 lines modified | Offset 14305, 15 lines modified | ||
| 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e70:·323 | 00037e70:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15048, 232 lines modified | Offset 15048, 232 lines modified | ||
| 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ac80:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | 0003ac80:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | ||
| 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ace0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ace0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003acf0:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003ad00:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003ad10:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003ad20:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003ad30:·643d·2269·646d·3631·3732·223e·3c74·6162··d="idm6172"><tab | |||
| 0003ad40:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003ad50:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ad60:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ad70:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ad80:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ad90:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ada0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003adb0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003adc0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003add0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ade0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003adf0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ae00:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ae10:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003ae20:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003ae30:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 0003ae40:·6464·3d64·7261·6375·742d·6669·7073·0a3c··dd=dracut-fips.< | |||
| 0003ae50:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ae60:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ae70:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ae80:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ae90:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003aea0:·2223·6964·6d36·3137·3322·2074·6162·696e··"#idm6173"·tabin | |||
| 0003aeb0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003aec0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003aed0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003aee0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003aef0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003af00:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003af10:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003af20:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003af30:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003af40:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003af50:·6964·6d36·3137·3322·3e3c·7461·626c·6520··idm6173"><table· | |||
| 0003af60:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003af70:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003af80:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003af90:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003afa0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003afb0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003afc0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003afd0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003afe0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003aff0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b000:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b010:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b020:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b030:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b040:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b050:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b060:·5f64·7261·6375·742d·6669·7073·0a0a·636c··_dracut-fips..cl | |||
| 0003b070:·6173·7320·696e·7374·616c·6c5f·6472·6163··ass·install_drac | |||
| 0003b080:·7574·2d66·6970·7320·7b0a·2020·7061·636b··ut-fips·{.··pack | |||
| 0003b090:·6167·6520·7b20·2764·7261·6375·742d·6669··age·{·'dracut-fi | |||
| 0003b0a0:·7073·273a·0a20·2020·2065·6e73·7572·6520··ps':.····ensure· | |||
| 0003b0b0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b0c0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b0d0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b0e0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b0f0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b100:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b110:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003b120:·3137·3422·2074·6162·696e·6465·783d·2230··174"·tabindex="0 | |||
| 0003b130:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b140:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b150:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b160:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b170:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b180:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b190:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b1a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b1b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b1c0:·6c61·7073·6522·2069·643d·2269·646d·3631··lapse"·id="idm61 | |||
| 0003b1d0:·3734·223e·3c74·6162·6c65·2063·6c61·7373··74"><table·class | |||
| 0003b1e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b1f0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b200:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b210:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b220:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b230:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b240:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b250:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b260:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b270:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b280:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b290:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b2a0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b2b0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b2c0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b2d0:·6d65·3a20·456e·7375·7265·2064·7261·6375··me:·Ensure·dracu | |||
| 0003b2e0:·742d·6669·7073·2069·7320·696e·7374·616c··t-fips·is·instal | |||
| 0003b2f0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b300:·2020·206e·616d·653a·2064·7261·6375·742d·····name:·dracut- | |||
| 0003b310:·6669·7073·0a20·2020·2073·7461·7465·3a20··fips.····state:· | |||
| 0003b320:·7072·6573·656e·740a·2020·7768·656e·3a0a··present.··when:. | |||
| 0003b330:·2020·2d20·2820·616e·7369·626c·655f·7669····-·(·ansible_vi | |||
| 0003b340:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b350:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| Max diff block lines reached; 5849286/5881080 bytes (99.46%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 92, 33 lines modified | Offset 92, 41 lines modified | ||
| 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 104 | package·--add=dracut-fips | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 110 | include·install_dracut-fips | 104 | include·install_dracut-fips |
| 111 | class·install_dracut-fips·{ | 105 | class·install_dracut-fips·{ |
| 112 | ··package·{·'dracut-fips': | 106 | ··package·{·'dracut-fips': |
| 113 | ····ensure·=>·'installed', | 107 | ····ensure·=>·'installed', |
| 114 | ··} | 108 | ··} |
| 115 | } | 109 | } |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 116 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 117 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 118 | ····yum·install·-y·"dracut-fips" | ||
| 119 | fi | ||
| 120 | else | ||
| 121 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 122 | fi | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 121 | -·name:·Ensure·dracut-fips·is·installed | 128 | -·name:·Ensure·dracut-fips·is·installed |
| 122 | ··package: | 129 | ··package: |
| Offset 145, 29 lines modified | Offset 153, 21 lines modified | ||
| 145 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 146 | ··-·package_dracut-fips_installed | 154 | ··-·package_dracut-fips_installed |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 148 | [[packages]] | 156 | [[packages]] |
| 149 | name·=·"dracut-fips" | 157 | name·=·"dracut-fips" |
| 150 | version·=·"*" | 158 | version·=·"*" |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 157 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 164 | package·--add=dracut-fips | ||
| 158 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 159 | ····yum·install·-y·"dracut-fips" | ||
| 160 | fi | ||
| 161 | else | ||
| 162 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 163 | fi | ||
| 164 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 165 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 166 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 166 | $·sudo·yum·install·dracut-fips | 167 | $·sudo·yum·install·dracut-fips |
| 167 | dracut·-f | 168 | dracut·-f |
| 168 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 169 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 169 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 170 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 170 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 171 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 195, 17 lines modified | Offset 195, 80 lines modified | ||
| 195 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 195 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 196 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 196 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 197 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 197 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 198 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 198 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 200 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 200 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 201 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule | 201 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 203 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 204 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·rpm·--quiet·-q·grub2-common;·};·then | ||
| 203 | 205 | #·prelink·not·installed | |
| 206 | if·test·-e·/etc/sysconfig/prelink·-o·-e·/usr/sbin/prelink;·then | ||
| 207 | ····if·grep·-q·^PRELINKING·/etc/sysconfig/prelink | ||
| 208 | ····then | ||
| 209 | ········sed·-i·'s/^PRELINKING[:blank:]*=[:blank:]*[:alpha:]*/PRELINKING=no/'·/etc/sysconfig/prelink | ||
| 210 | ····else | ||
| 211 | ········printf·'\n'·>>·/etc/sysconfig/prelink | ||
| 212 | ········printf·'%s\n'·'#·Set·PRELINKING=no·per·security·requirements'·'PRELINKING=no'·>>·/etc/sysconfig/prelink | ||
| 213 | ····fi | ||
| 214 | ····#·Undo·previous·prelink·changes·to·binaries·if·prelink·is·available. | ||
| 215 | ····if·test·-x·/usr/sbin/prelink;·then | ||
| 216 | ········/usr/sbin/prelink·-ua | ||
| 217 | ····fi | ||
| 218 | fi | ||
| 219 | if·grep·-q·-m1·-o·aes·/proc/cpuinfo;·then | ||
| 220 | » if·!·rpm·-q·--quiet·"dracut-fips-aesni"·;·then | ||
| 221 | ····yum·install·-y·"dracut-fips-aesni" | ||
| 222 | fi | ||
| Max diff block lines reached; 677070/685864 bytes (98.72%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037c80:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037c90:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037c90:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ca0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ca0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cb0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cb0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037cc0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037cc0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037cd0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037cd0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037ce0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037ce0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037cf0:·3230·323 | 00037cf0:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00037d00:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d00:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d10:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d10:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d20:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d20:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d30:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d30:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d40:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d40:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d50:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d50:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037d60:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037d60:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15123, 310 lines modified | Offset 15123, 310 lines modified | ||
| 0003b120:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b120:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b130:·2369·646d·3532·3939·2220·7461·6269·6e64··#idm5299"·tabind | 0003b130:·2369·646d·3532·3939·2220·7461·6269·6e64··#idm5299"·tabind | ||
| 0003b140:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b140:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b150:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b150:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b160:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b160:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b170:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b170:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b180:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b180:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b190:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b1a0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b1b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b1c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b1d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b1e0:·3532·3939·223e·3c70·7265·3e3c·636f·6465··5299"><pre><code | |||
| 0003b1f0:·3e0a·2320·4669·6e64·2077·6869·6368·2066··>.#·Find·which·f | |||
| 0003b200:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | |||
| 0003b210:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | |||
| 0003b220:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | |||
| 0003b230:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | |||
| 0003b240:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | |||
| 0003b250:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | |||
| 0003b260:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | |||
| 0003b270:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b280:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | |||
| 0003b290:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | |||
| 0003b2a0:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | |||
| 0003b2b0:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | |||
| 0003b2c0:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | |||
| 0003b2d0:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003b2e0:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | |||
| 0003b2f0:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | |||
| 0003b300:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | |||
| 0003b310:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | |||
| 0003b320:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | |||
| 0003b330:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | |||
| 0003b340:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | |||
| 0003b350:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | |||
| 0003b360:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | |||
| 0003b370:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | |||
| 0003b380:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | |||
| 0003b390:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003b3a0:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | |||
| 0003b3b0:·2729·220a·0a20·2020·200a·2020·2020·7975··')"..····.····yu | |||
| 0003b3c0:·6d20·7265·696e·7374·616c·6c20·2d79·2024··m·reinstall·-y·$ | |||
| 0003b3d0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003b3e0:·7374·616c·6c0a·2020·2020·0a66·690a·3c2f··stall.····.fi.</ | |||
| 0003b3f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b400:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b410:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b420:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b440:·2369·646d·3533·3030·2220·7461·6269·6e64··#idm5300"·tabind | |||
| 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b | 0003b4a0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b | 0003b4b0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003b | 0003b4c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b | 0003b4d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b | 0003b4e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b | 0003b4f0:·6964·6d35·3330·3022·3e3c·7461·626c·6520··idm5300"><table· | ||
| 0003b | 0003b500:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b | 0003b510:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b | 0003b520:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b | 0003b530:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b | 0003b540:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b | 0003b550:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003b | 0003b560:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003b570:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b580:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003b | 0003b590:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b | 0003b5a0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b | 0003b5b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b5c0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003b5d0:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003b | 0003b5e0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b | 0003b5f0:·3e3c·636f·6465·3e2d·206e·616d·653a·2027··><code>-·name:·' | ||
| 0003b | 0003b600:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| 0003b300:·6520·6d61·6e61·6765·7220·7265·696e·7374··e·manager·reinst | |||
| 0003b310:·616c·6c20·636f·6d6d·616e·6427·0a20·2073··all·command'.··s | |||
| 0003b320:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | |||
| 0003b330:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | |||
| 0003b340:·6e73·7461·6c6c·5f63·6d64·3a20·7975·6d20··nstall_cmd:·yum· | |||
| 0003b350:·7265·696e·7374·616c·6c20·2d79·0a20·2077··reinstall·-y.··w | |||
| 0003b360:·6865·6e3a·2061·6e73·6962·6c65·5f64·6973··hen:·ansible_dis | |||
| 0003b370:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | |||
| 0003b380:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | |||
| 0003b390:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | |||
| 0003b3a0:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | |||
| 0003b3b0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b3c0:·3130·2e34·2e31·0a20·202d·2044·4953·412d··10.4.1.··-·DISA- | |||
| 0003b3d0:·5354·4947·2d4f·4c30·372d·3030·2d30·3130··STIG-OL07-00-010 | |||
| 0003b3e0:·3032·300a·2020·2d20·4e49·5354·2d38·3030··020.··-·NIST-800 | |||
| 0003b3f0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | |||
| 0003b400:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | |||
| 0003b410:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | |||
| 0003b420:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | |||
| 0003b430:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | |||
| 0003b440:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b450:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | |||
| 0003b460:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | |||
| 0003b470:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b480:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | |||
| 0003b490:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | |||
| 0003b4a0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b4b0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b4c0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | |||
| 0003b4d0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | |||
| 0003b4e0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | |||
| 0003b4f0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | |||
| Max diff block lines reached; 9531635/9550595 bytes (99.80%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·Draft·for·Oracle·Linux·7 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·Draft·for·Oracle·Linux·7 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:7 | 41 | ····*·cpe:/o:oracle:linux:7 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 97, 14 lines modified | Offset 97, 27 lines modified | ||
| 97 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 97 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 98 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 98 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 106 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 107 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 108 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 109 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 110 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 111 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 117 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 110 | ··set_fact: | 118 | ··set_fact: |
| Offset 236, 27 lines modified | Offset 249, 14 lines modified | ||
| 236 | ··-·PCI-DSSv4-11.5.2 | 249 | ··-·PCI-DSSv4-11.5.2 |
| 237 | ··-·high_complexity | 250 | ··-·high_complexity |
| 238 | ··-·high_severity | 251 | ··-·high_severity |
| 239 | ··-·medium_disruption | 252 | ··-·medium_disruption |
| 240 | ··-·no_reboot_needed | 253 | ··-·no_reboot_needed |
| 241 | ··-·restrict_strategy | 254 | ··-·restrict_strategy |
| 242 | ··-·rpm_verify_hashes | 255 | ··-·rpm_verify_hashes |
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 244 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 245 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 246 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 247 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 248 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 249 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 250 | fi | ||
| 251 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 256 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 252 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 257 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 253 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 258 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 254 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 259 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 255 | $·rpm·-qf·FILENAME | 260 | $·rpm·-qf·FILENAME |
| 256 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 261 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 279, 14 lines modified | Offset 279, 44 lines modified | ||
| 279 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 279 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 280 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 280 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 282 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 282 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 283 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 283 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 284 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 284 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 285 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 285 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 291 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 292 | declare·-A·SETPERMS_RPM_DICT | ||
| 293 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 294 | #·is·expected·by·the·RPM·database | ||
| 295 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 296 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 297 | do | ||
| 298 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 299 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 300 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 301 | ········do | ||
| 302 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 303 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 304 | ········done | ||
| 305 | done | ||
| 306 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 307 | #·correct·values | ||
| 308 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 309 | do | ||
| 310 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 311 | done | ||
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 291 | -·name:·Read·list·of·files·with·incorrect·permissions | 317 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 292 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 318 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 367, 44 lines modified | Offset 397, 14 lines modified | ||
| 367 | ··-·PCI-DSSv4-11.5.2 | 397 | ··-·PCI-DSSv4-11.5.2 |
| 368 | ··-·high_complexity | 398 | ··-·high_complexity |
| 369 | ··-·high_severity | 399 | ··-·high_severity |
| 370 | ··-·medium_disruption | 400 | ··-·medium_disruption |
| 371 | ··-·no_reboot_needed | 401 | ··-·no_reboot_needed |
| 372 | ··-·restrict_strategy | 402 | ··-·restrict_strategy |
| 373 | ··-·rpm_verify_permissions | 403 | ··-·rpm_verify_permissions |
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 829091/836847 bytes (99.07%) of diff not shown. | |||
| Offset 14289, 16 lines modified | Offset 14289, 16 lines modified | ||
| 00037d00:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037d00:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037d10:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037d10:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d20:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d20:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d30:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d30:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d40:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d40:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d50:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d50:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d70:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d70:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d80:·313 | 00037d80:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037d90:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d90:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037da0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037da0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037db0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037db0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037dc0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037dc0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037dd0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037dd0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037de0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037de0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037df0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037df0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 14650, 177 lines modified | Offset 14650, 177 lines modified | ||
| 00039390:·7461·7267·6574·3d22·2369·646d·3930·3333··target="#idm9033 | 00039390:·7461·7267·6574·3d22·2369·646d·3930·3333··target="#idm9033 | ||
| 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039400:·696f·6e20· | 00039400:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | ||
| 00039410:· | 00039410:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 00039420:· | 00039420:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00039430:·6 | 00039430:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00039440:· | 00039440:·6522·2069·643d·2269·646d·3930·3333·223e··e"·id="idm9033"> | ||
| 00039450:· | 00039450:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 00039460:· | 00039460:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 00039470:· | 00039470:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 00039480:· | 00039480:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 00039490:· | 00039490:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 000394a0:· | 000394a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 000394b0:· | 000394b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 000394c0:· | 000394c0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 000394d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000394e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 000394f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00039500:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00039510:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039520:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039530:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039540:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 00039550:·6765·202d·2d61·6464·3d67·6c69·6263·0a3c··ge·--add=glibc.< | |||
| 00039560:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00039570:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00039580:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00039590:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 000395a0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 000395b0:·2223·6964·6d39·3033·3422·2074·6162·696e··"#idm9034"·tabin | |||
| 000395c0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 000395d0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 000395e0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 000395f0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00039600:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00039610:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 00039620:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 00039630:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039640:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039650:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039660:·6964·6d39·3033·3422·3e3c·7461·626c·6520··idm9034"><table· | |||
| 00039670:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039680:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039690:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 000396a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 000396b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039 | 000394d0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 00039 | 000394e0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 00039 | 000394f0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 00039 | 00039500:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 00039 | 00039510:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 00039 | 00039520:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 00039530:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00039540:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 00039720:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039730:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00039740:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00039750:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00039760:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 00039770:·5f67·6c69·6263·0a0a·636c·6173·7320·696e··_glibc..class·in | |||
| 00039 | 00039550:·696e·7374·616c·6c5f·676c·6962·630a·0a63··install_glibc..c | ||
| 00039790:·7061·636b·6167·6520·7b20·2767·6c69·6263··package·{·'glibc | |||
| 000397a0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 000397b0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 000397c0:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 000397d0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 00039 | 00039560:·6c61·7373·2069·6e73·7461·6c6c·5f67·6c69··lass·install_gli | ||
| 00039570:·6263·207b·0a20·2070·6163·6b61·6765·207b··bc·{.··package·{ | |||
| 00039580:·2027·676c·6962·6327·3a0a·2020·2020·656e···'glibc':.····en | |||
| 00039590:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 000395a0:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 000395b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 000395c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 000395d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 000395e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00039 | 000395f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 00039600:·2369·646d·3930·3334·2220·7461·6269·6e64··#idm9034"·tabind | |||
| 00039610:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00039620:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00039630:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00039640:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00039650:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00039660:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 00039670:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 00039800:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 00039810:·2d74·6172·6765·743d·2223·6964·6d39·3033··-target="#idm903 | |||
| 00039820:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 00039830:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00039840:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00039850:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00039860:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00039870:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00039880:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00039890:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00039 | 00039680:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 00039 | 00039690:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 00039 | 000396a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 00039 | 000396b0:·3930·3334·223e·3c74·6162·6c65·2063·6c61··9034"><table·cla | ||
| 00039 | 000396c0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 00039 | 000396d0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 00039 | 000396e0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 00039 | 000396f0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 00039 | 00039700:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 00039710:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039720:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| Max diff block lines reached; 198364/211942 bytes (93.59%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Security·Profile·of·Oracle·Linux·7·for·SAP | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Security·Profile·of·Oracle·Linux·7·for·SAP |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_sap | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_sap |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:oracle:linux:7 | 43 | ····*·cpe:/o:oracle:linux:7 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8O_\x8b_\x8s_\x8o_\x8l_\x8e_\x8t_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8O_\x8b_\x8s_\x8o_\x8l_\x8e_\x8t_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 64, 33 lines modified | Offset 64, 35 lines modified | ||
| 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the | 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the |
| 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: | 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: |
| 66 | $·sudo·yum·install·glibc | 66 | $·sudo·yum·install·glibc |
| 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux | 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux |
| 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. | 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. |
| 69 | Severity: ·medium | 69 | Severity: ·medium |
| 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed | 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed |
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 72 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 73 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 74 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 75 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 76 | package·--add=glibc | ||
| 77 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 78 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 72 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 79 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 73 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 80 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 74 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 81 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 75 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 82 | include·install_glibc | 76 | include·install_glibc |
| 83 | class·install_glibc·{ | 77 | class·install_glibc·{ |
| 84 | ··package·{·'glibc': | 78 | ··package·{·'glibc': |
| 85 | ····ensure·=>·'installed', | 79 | ····ensure·=>·'installed', |
| 86 | ··} | 80 | ··} |
| 87 | } | 81 | } |
| 82 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 83 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 84 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 85 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 86 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 87 | if·!·rpm·-q·--quiet·"glibc"·;·then | ||
| 88 | ····yum·install·-y·"glibc" | ||
| 89 | fi | ||
| 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 89 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 91 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 90 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 92 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 91 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 93 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 92 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 94 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 93 | -·name:·Ensure·glibc·is·installed | 95 | -·name:·Ensure·glibc·is·installed |
| 94 | ··package: | 96 | ··package: |
| Offset 104, 50 lines modified | Offset 106, 50 lines modified | ||
| 104 | ··-·no_reboot_needed | 106 | ··-·no_reboot_needed |
| 105 | ··-·package_glibc_installed | 107 | ··-·package_glibc_installed |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 107 | [[packages]] | 109 | [[packages]] |
| 108 | name·=·"glibc" | 110 | name·=·"glibc" |
| 109 | version·=·"*" | 111 | version·=·"*" |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | package·--add=glibc | ||
| 115 | if·!·rpm·-q·--quiet·"glibc"·;·then | ||
| 116 | ····yum·install·-y·"glibc" | ||
| 117 | fi | ||
| 118 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 118 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 119 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated | 119 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated |
| 120 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information | 120 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information |
| 121 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: | 121 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: |
| 122 | $·sudo·yum·install·uuidd | 122 | $·sudo·yum·install·uuidd |
| 123 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. | 123 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. |
| 124 | Severity: ·medium | 124 | Severity: ·medium |
| 125 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed | 125 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package·--add=uuidd | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | include·install_uuidd | 131 | include·install_uuidd |
| 138 | class·install_uuidd·{ | 132 | class·install_uuidd·{ |
| 139 | ··package·{·'uuidd': | 133 | ··package·{·'uuidd': |
| 140 | ····ensure·=>·'installed', | 134 | ····ensure·=>·'installed', |
| 141 | ··} | 135 | ··} |
| 142 | } | 136 | } |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | if·!·rpm·-q·--quiet·"uuidd"·;·then | ||
| 143 | ····yum·install·-y·"uuidd" | ||
| 144 | fi | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | -·name:·Ensure·uuidd·is·installed | 150 | -·name:·Ensure·uuidd·is·installed |
| 149 | ··package: | 151 | ··package: |
| Offset 161, 23 lines modified | Offset 163, 21 lines modified | ||
| 161 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 162 | ··-·package_uuidd_installed | 164 | ··-·package_uuidd_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 164 | [[packages]] | 166 | [[packages]] |
| 165 | name·=·"uuidd" | 167 | name·=·"uuidd" |
| 166 | version·=·"*" | 168 | version·=·"*" |
| Max diff block lines reached; 19814/25846 bytes (76.66%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d40:·2d31·3 | 00037d40:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15108, 310 lines modified | Offset 15108, 310 lines modified | ||
| 0003b030:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | 0003b030:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | ||
| 0003b040:·3939·2220·7461·6269·6e64·6578·3d22·3022··99"·tabindex="0" | 0003b040:·3939·2220·7461·6269·6e64·6578·3d22·3022··99"·tabindex="0" | ||
| 0003b050:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b050:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b060:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b060:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b070:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b070:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b080:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b080:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b090:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b090:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b0a0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b0b0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b0c0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b0d0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b0e0:·6522·2069·643d·2269·646d·3532·3939·223e··e"·id="idm5299"> | |||
| 0003b0f0:·3c70·7265·3e3c·636f·6465·3e0a·2320·4669··<pre><code>.#·Fi | |||
| 0003b100:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | |||
| 0003b110:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | |||
| 0003b120:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | |||
| 0003b130:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | |||
| 0003b140:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | |||
| 0003b150:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | |||
| 0003b160:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | |||
| 0003b0a0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b0b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b0c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b0d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b0e0:·6170·7365·2220·6964·3d22·6964·6d35·3239··apse"·id="idm529 | |||
| 0003b0f0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b100:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b110:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b120:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b130:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b140:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b150:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | |||
| 0003b160:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b170:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | |||
| 0003b180:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | |||
| 0003b190:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b1a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b1b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b1c0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003b1d0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003b1e0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b1f0:·3e2d·206e·616d·653a·2027·5365·7420·6661··>-·name:·'Set·fa | |||
| 0003b200:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | |||
| 0003b210:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | |||
| 0003b220:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | |||
| 0003b230:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | |||
| 0003b240:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | |||
| 0003b250:·5f63·6d64·3a20·7975·6d20·7265·696e·7374··_cmd:·yum·reinst | |||
| 0003b260:·616c·6c20·2d79·0a20·2077·6865·6e3a·2061··all·-y.··when:·a | |||
| 0003b270:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | |||
| 0003b280:·696f·6e20·696e·205b·2022·4665·646f·7261··ion·in·[·"Fedora | |||
| 0003b290:·222c·2022·5265·6448·6174·222c·2022·4365··",·"RedHat",·"Ce | |||
| 0003b2a0:·6e74·4f53·222c·2022·4f72·6163·6c65·4c69··ntOS",·"OracleLi | |||
| 0003b2b0:·6e75·7822·205d·0a20·2074·6167·733a·0a20··nux"·].··tags:.· | |||
| 0003b2c0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | |||
| 0003b2d0:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003b2e0:·4c30·372d·3030·2d30·3130·3032·300a·2020··L07-00-010020.·· | |||
| 0003b2f0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | |||
| 0003b300:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | |||
| 0003b310:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | |||
| 0003b320:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | |||
| 0003b330:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | |||
| 0003b340:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | |||
| 0003b350:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b360:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | |||
| 0003b370:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | |||
| 0003b380:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | |||
| 0003b390:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b3a0:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | |||
| 0003b3b0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b3c0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b3d0:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | |||
| 0003b3e0:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | |||
| 0003b3f0:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | |||
| 0003b400:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | |||
| 0003b410:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b420:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | |||
| 0003b430:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | |||
| 0003b440:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | |||
| 0003b450:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | |||
| 0003b460:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | |||
| 0003b470:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | |||
| 0003b480:·6d6d·616e·6420·287a·7970·7065·7229·270a··mmand·(zypper)'. | |||
| 0003b490:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | |||
| 0003b4a0:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | |||
| 0003b4b0:·7265·696e·7374·616c·6c5f·636d·643a·207a··reinstall_cmd:·z | |||
| 0003b4c0:·7970·7065·7220·696e·202d·6620·2d79·0a20··ypper·in·-f·-y.· | |||
| 0003b4d0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f64···when:·ansible_d | |||
| 0003b4e0:·6973·7472·6962·7574·696f·6e20·3d3d·2022··istribution·==·" | |||
| 0003b4f0:·534c·4553·220a·2020·7461·6773·3a0a·2020··SLES".··tags:.·· | |||
| 0003b500:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | |||
| 0003b510:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | |||
| 0003b520:·3037·2d30·302d·3031·3030·3230·0a20·202d··07-00-010020.··- | |||
| 0003b530:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | |||
| 0003b540:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | |||
| 0003b550:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | |||
| 0003b560:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003b570:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | |||
| 0003b580:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | |||
| 0003b590:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b5a0:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | |||
| 0003b5b0:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | |||
| 0003b5c0:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | |||
| 0003b5d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b5e0:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | |||
| 0003b5f0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b600:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b610:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | |||
| 0003b620:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | |||
| 0003b630:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | |||
| Max diff block lines reached; 9286865/9329561 bytes (99.54%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·7 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·7 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:7 | 42 | ····*·cpe:/o:oracle:linux:7 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 95, 14 lines modified | Offset 95, 27 lines modified | ||
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 99 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 103 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 104 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 105 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 106 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 107 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 108 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 109 | fi | ||
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 107 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 115 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 108 | ··set_fact: | 116 | ··set_fact: |
| Offset 234, 27 lines modified | Offset 247, 14 lines modified | ||
| 234 | ··-·PCI-DSSv4-11.5.2 | 247 | ··-·PCI-DSSv4-11.5.2 |
| 235 | ··-·high_complexity | 248 | ··-·high_complexity |
| 236 | ··-·high_severity | 249 | ··-·high_severity |
| 237 | ··-·medium_disruption | 250 | ··-·medium_disruption |
| 238 | ··-·no_reboot_needed | 251 | ··-·no_reboot_needed |
| 239 | ··-·restrict_strategy | 252 | ··-·restrict_strategy |
| 240 | ··-·rpm_verify_hashes | 253 | ··-·rpm_verify_hashes |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 242 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 243 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 244 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 245 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 246 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 247 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 248 | fi | ||
| 249 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 254 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 250 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 255 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 251 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 256 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 252 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 257 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 253 | $·rpm·-qf·FILENAME | 258 | $·rpm·-qf·FILENAME |
| 254 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 259 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 277, 14 lines modified | Offset 277, 44 lines modified | ||
| 277 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 277 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 278 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 278 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 279 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 279 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 280 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 280 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 281 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 281 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 283 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 283 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 284 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 285 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 286 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 287 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 288 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 289 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 290 | declare·-A·SETPERMS_RPM_DICT | ||
| 291 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 292 | #·is·expected·by·the·RPM·database | ||
| 293 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 294 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 295 | do | ||
| 296 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 297 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 298 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 299 | ········do | ||
| 300 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 301 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 302 | ········done | ||
| 303 | done | ||
| 304 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 305 | #·correct·values | ||
| 306 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 307 | do | ||
| 308 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 309 | done | ||
| 284 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 310 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 285 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 311 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 286 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 312 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 287 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 313 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 288 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 314 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 289 | -·name:·Read·list·of·files·with·incorrect·permissions | 315 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 290 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 316 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 365, 44 lines modified | Offset 395, 14 lines modified | ||
| 365 | ··-·PCI-DSSv4-11.5.2 | 395 | ··-·PCI-DSSv4-11.5.2 |
| 366 | ··-·high_complexity | 396 | ··-·high_complexity |
| 367 | ··-·high_severity | 397 | ··-·high_severity |
| 368 | ··-·medium_disruption | 398 | ··-·medium_disruption |
| 369 | ··-·no_reboot_needed | 399 | ··-·no_reboot_needed |
| 370 | ··-·restrict_strategy | 400 | ··-·restrict_strategy |
| 371 | ··-·rpm_verify_permissions | 401 | ··-·rpm_verify_permissions |
| 372 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 373 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 374 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 745228/752872 bytes (98.98%) of diff not shown. | |||
| Offset 14278, 16 lines modified | Offset 14278, 16 lines modified | ||
| 00037c50:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037c50:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037c60:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037c60:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037c70:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037c70:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037c80:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037c80:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037c90:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037c90:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ca0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ca0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037cc0:·2028·6173·206f·6620·3230·323 | 00037cc0:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00037cd0:·3 | 00037cd0:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 00037ce0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037ce0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037cf0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037cf0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037d00:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037d00:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037d10:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037d10:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037d20:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037d20:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037d30:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037d30:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037d40:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037d40:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15172, 310 lines modified | Offset 15172, 310 lines modified | ||
| 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b440:·2369·646d·3532·3939·2220·7461·6269·6e64··#idm5299"·tabind | 0003b440:·2369·646d·3532·3939·2220·7461·6269·6e64··#idm5299"·tabind | ||
| 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4a0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b4b0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b4c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b4d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b4e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b4f0:·3532·3939·223e·3c70·7265·3e3c·636f·6465··5299"><pre><code | |||
| 0003b500:·3e0a·2320·4669·6e64·2077·6869·6368·2066··>.#·Find·which·f | |||
| 0003b510:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | |||
| 0003b520:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | |||
| 0003b530:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | |||
| 0003b540:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | |||
| 0003b550:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | |||
| 0003b560:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | |||
| 0003b570:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | |||
| 0003b580:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b590:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | |||
| 0003b5a0:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | |||
| 0003b5b0:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | |||
| 0003b5c0:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | |||
| 0003b5d0:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | |||
| 0003b5e0:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003b5f0:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | |||
| 0003b600:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | |||
| 0003b610:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | |||
| 0003b620:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | |||
| 0003b630:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | |||
| 0003b640:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | |||
| 0003b650:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | |||
| 0003b660:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | |||
| 0003b670:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | |||
| 0003b680:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | |||
| 0003b690:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | |||
| 0003b6a0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003b6b0:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | |||
| 0003b6c0:·2729·220a·0a20·2020·200a·2020·2020·7975··')"..····.····yu | |||
| 0003b6d0:·6d20·7265·696e·7374·616c·6c20·2d79·2024··m·reinstall·-y·$ | |||
| 0003b6e0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003b6f0:·7374·616c·6c0a·2020·2020·0a66·690a·3c2f··stall.····.fi.</ | |||
| 0003b700:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b710:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b720:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b730:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b740:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b750:·2369·646d·3533·3030·2220·7461·6269·6e64··#idm5300"·tabind | |||
| 0003b760:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b770:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b780:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b790:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b7a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b | 0003b7b0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b | 0003b7c0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003b | 0003b7d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b | 0003b7e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b | 0003b7f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b | 0003b800:·6964·6d35·3330·3022·3e3c·7461·626c·6520··idm5300"><table· | ||
| 0003b | 0003b810:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b | 0003b820:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b | 0003b830:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b | 0003b840:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b | 0003b850:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b | 0003b860:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003b | 0003b870:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003b880:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b890:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003b | 0003b8a0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b | 0003b8b0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b | 0003b8c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b8d0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003b8e0:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003b | 0003b8f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b | 0003b900:·3e3c·636f·6465·3e2d·206e·616d·653a·2027··><code>-·name:·' | ||
| 0003b | 0003b910:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| 0003b | 0003b920:·6520·6d61·6e61·6765·7220·7265·696e·7374··e·manager·reinst | ||
| 0003b | 0003b930:·616c·6c20·636f·6d6d·616e·6427·0a20·2073··all·command'.··s | ||
| 0003b | 0003b940:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003b | 0003b950:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003b | 0003b960:·6e73·7461·6c6c·5f63·6d64·3a20·7975·6d20··nstall_cmd:·yum· | ||
| 0003b | 0003b970:·7265·696e·7374·616c·6c20·2d79·0a20·2077··reinstall·-y.··w | ||
| 0003b | 0003b980:·6865·6e3a·2061·6e73·6962·6c65·5f64·6973··hen:·ansible_dis | ||
| 0003b | 0003b990:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | ||
| 0003b | 0003b9a0:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | ||
| 0003b | 0003b9b0:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | ||
| 0003b | 0003b9c0:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | ||
| 0003b | 0003b9d0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b | 0003b9e0:·3130·2e34·2e31·0a20·202d·2044·4953·412d··10.4.1.··-·DISA- | ||
| 0003b | 0003b9f0:·5354·4947·2d4f·4c30·372d·3030·2d30·3130··STIG-OL07-00-010 | ||
| 0003b | 0003ba00:·3032·300a·2020·2d20·4e49·5354·2d38·3030··020.··-·NIST-800 | ||
| 0003b | 0003ba10:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003b | 0003ba20:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003b | 0003ba30:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003b | 0003ba40:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003b | 0003ba50:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003b | 0003ba60:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003ba70:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003b | 0003ba80:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003b | 0003ba90:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b | 0003baa0:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003b | 0003bab0:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003b | 0003bac0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003b | 0003bad0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003b | 0003bae0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003b | 0003baf0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003b | 0003bb00:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| Max diff block lines reached; 21967356/21986454 bytes (99.91%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·7 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·7 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:7 | 41 | ····*·cpe:/o:oracle:linux:7 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 107, 14 lines modified | Offset 107, 27 lines modified | ||
| 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 113 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 116 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 117 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 118 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 119 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 120 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 121 | fi | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 119 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 127 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 120 | ··set_fact: | 128 | ··set_fact: |
| Offset 246, 27 lines modified | Offset 259, 14 lines modified | ||
| 246 | ··-·PCI-DSSv4-11.5.2 | 259 | ··-·PCI-DSSv4-11.5.2 |
| 247 | ··-·high_complexity | 260 | ··-·high_complexity |
| 248 | ··-·high_severity | 261 | ··-·high_severity |
| 249 | ··-·medium_disruption | 262 | ··-·medium_disruption |
| 250 | ··-·no_reboot_needed | 263 | ··-·no_reboot_needed |
| 251 | ··-·restrict_strategy | 264 | ··-·restrict_strategy |
| 252 | ··-·rpm_verify_hashes | 265 | ··-·rpm_verify_hashes |
| 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 254 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 255 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 256 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 257 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 258 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 259 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 260 | fi | ||
| 261 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 266 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 262 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 267 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 263 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 268 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 264 | run·the·following·command·to·determine·which·package·owns·it: | 269 | run·the·following·command·to·determine·which·package·owns·it: |
| 265 | $·rpm·-qf·FILENAME | 270 | $·rpm·-qf·FILENAME |
| 266 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 271 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 267 | $·sudo·rpm·--setugids·PACKAGENAME | 272 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 287, 14 lines modified | Offset 287, 40 lines modified | ||
| 287 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 287 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 288 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 288 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 290 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 290 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 291 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 291 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 292 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 292 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 293 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 293 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 299 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 300 | declare·-A·SETPERMS_RPM_DICT | ||
| 301 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 302 | #·is·expected·by·the·RPM·database | ||
| 303 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 304 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 305 | do | ||
| 306 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 307 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 308 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 309 | done | ||
| 310 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 311 | #·correct·values | ||
| 312 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 313 | do | ||
| 314 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 315 | done | ||
| 294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 316 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 317 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 318 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 319 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 320 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 299 | -·name:·Read·list·of·files·with·incorrect·ownership | 321 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 300 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 322 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 372, 40 lines modified | Offset 398, 14 lines modified | ||
| 372 | ··-·PCI-DSSv4-11.5.2 | 398 | ··-·PCI-DSSv4-11.5.2 |
| 373 | ··-·high_complexity | 399 | ··-·high_complexity |
| 374 | ··-·high_severity | 400 | ··-·high_severity |
| 375 | ··-·medium_disruption | 401 | ··-·medium_disruption |
| 376 | ··-·no_reboot_needed | 402 | ··-·no_reboot_needed |
| 377 | ··-·restrict_strategy | 403 | ··-·restrict_strategy |
| 378 | ··-·rpm_verify_ownership | 404 | ··-·rpm_verify_ownership |
| 379 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 380 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 381 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 382 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 383 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 384 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1742836/1750194 bytes (99.58%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dd0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037de0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037de0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037df0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037df0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e00:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e00:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e10:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e10:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e20:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e20:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e30:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e30:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e40:·3230·323 | 00037e40:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e50:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e60:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e60:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e70:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e70:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e80:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e80:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e90:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e90:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037ea0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037ea0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037eb0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037eb0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15191, 309 lines modified | Offset 15191, 309 lines modified | ||
| 0003b560:·6765·743d·2223·6964·6d35·3239·3922·2074··get="#idm5299"·t | 0003b560:·6765·743d·2223·6964·6d35·3239·3922·2074··get="#idm5299"·t | ||
| 0003b570:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b570:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b580:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b580:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b590:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b590:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b5a0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b5a0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b5b0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b5b0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b5c0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b5c0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b5d0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b5e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b5f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b600:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b610:·3d22·6964·6d35·3239·3922·3e3c·7072·653e··="idm5299"><pre> | |||
| 0003b620:·3c63·6f64·653e·0a23·2046·696e·6420·7768··<code>.#·Find·wh | |||
| 0003b630:·6963·6820·6669·6c65·7320·6861·7665·2069··ich·files·have·i | |||
| 0003b5d0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b5e0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b5f0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b600:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b610:·2069·643d·2269·646d·3532·3939·223e·3c74···id="idm5299"><t | |||
| 0003b620:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b630:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b640:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b650:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b660:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b670:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | |||
| 0003b680:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b690:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b6a0:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 0003b6b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b6c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b6d0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b6e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b6f0:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003b700:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b710:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b720:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | |||
| 0003b730:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | |||
| 0003b740:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | |||
| 0003b750:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | |||
| 0003b760:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | |||
| 0003b770:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | |||
| 0003b780:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | |||
| 0003b790:·790a·2020·7768·656e·3a20·616e·7369·626c··y.··when:·ansibl | |||
| 0003b7a0:·655f·6469·7374·7269·6275·7469·6f6e·2069··e_distribution·i | |||
| 0003b7b0:·6e20·5b20·2246·6564·6f72·6122·2c20·2252··n·[·"Fedora",·"R | |||
| 0003b7c0:·6564·4861·7422·2c20·2243·656e·744f·5322··edHat",·"CentOS" | |||
| 0003b7d0:·2c20·224f·7261·636c·654c·696e·7578·2220··,·"OracleLinux"· | |||
| 0003b7e0:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b7f0:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | |||
| 0003b800:·4449·5341·2d53·5449·472d·4f4c·3037·2d30··DISA-STIG-OL07-0 | |||
| 0003b810:·302d·3031·3030·3230·0a20·202d·204e·4953··0-010020.··-·NIS | |||
| 0003b820:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | |||
| 0003b830:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003b840:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | |||
| 0003b850:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | |||
| 0003b860:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b870:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | |||
| 0003b880:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | |||
| 0003b890:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b8a0:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | |||
| 0003b8b0:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | |||
| 0003b8c0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003b8d0:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | |||
| 0003b8e0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b8f0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b900:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | |||
| 0003b910:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | |||
| 0003b920:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| 0003b930:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | |||
| 0003b940:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b950:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003b960:·7465·6779·0a20·202d·2072·706d·5f76·6572··tegy.··-·rpm_ver | |||
| 0003b970:·6966·795f·6861·7368·6573·0a0a·2d20·6e61··ify_hashes..-·na | |||
| 0003b980:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | |||
| 0003b990:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | |||
| 0003b9a0:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | |||
| 0003b9b0:·2028·7a79·7070·6572·2927·0a20·2073·6574···(zypper)'.··set | |||
| 0003b9c0:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | |||
| 0003b9d0:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | |||
| 0003b9e0:·7461·6c6c·5f63·6d64·3a20·7a79·7070·6572··tall_cmd:·zypper | |||
| 0003b9f0:·2069·6e20·2d66·202d·790a·2020·7768·656e···in·-f·-y.··when | |||
| 0003ba00:·3a20·616e·7369·626c·655f·6469·7374·7269··:·ansible_distri | |||
| 0003ba10:·6275·7469·6f6e·203d·3d20·2253·4c45·5322··bution·==·"SLES" | |||
| 0003ba20:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003ba30:·532d·352e·3130·2e34·2e31·0a20·202d·2044··S-5.10.4.1.··-·D | |||
| 0003ba40:·4953·412d·5354·4947·2d4f·4c30·372d·3030··ISA-STIG-OL07-00 | |||
| 0003ba50:·2d30·3130·3032·300a·2020·2d20·4e49·5354··-010020.··-·NIST | |||
| 0003ba60:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | |||
| 0003ba70:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003ba80:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | |||
| 0003ba90:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | |||
| 0003baa0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003bab0:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | |||
| 0003bac0:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | |||
| 0003bad0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | |||
| 0003bae0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | |||
| 0003baf0:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | |||
| 0003bb00:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | |||
| 0003bb10:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | |||
| 0003bb20:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003bb30:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003bb40:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | |||
| 0003bb50:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | |||
| 0003bb60:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | |||
| 0003bb70:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | |||
| 0003bb80:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003bb90:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | |||
| 0003bba0:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | |||
| 0003bbb0:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | |||
| 0003bbc0:·653a·2052·6561·6420·6669·6c65·7320·7769··e:·Read·files·wi | |||
| 0003b | 0003b640:·6e63·6f72·7265·6374·2068·6173·6820·286e··ncorrect·hash·(n | ||
| Max diff block lines reached; 21948834/21967932 bytes (99.91%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·7 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·7 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:7 | 46 | ····*·cpe:/o:oracle:linux:7 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 111, 14 lines modified | Offset 111, 27 lines modified | ||
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 131 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 124 | ··set_fact: | 132 | ··set_fact: |
| Offset 250, 27 lines modified | Offset 263, 14 lines modified | ||
| 250 | ··-·PCI-DSSv4-11.5.2 | 263 | ··-·PCI-DSSv4-11.5.2 |
| 251 | ··-·high_complexity | 264 | ··-·high_complexity |
| 252 | ··-·high_severity | 265 | ··-·high_severity |
| 253 | ··-·medium_disruption | 266 | ··-·medium_disruption |
| 254 | ··-·no_reboot_needed | 267 | ··-·no_reboot_needed |
| 255 | ··-·restrict_strategy | 268 | ··-·restrict_strategy |
| 256 | ··-·rpm_verify_hashes | 269 | ··-·rpm_verify_hashes |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 258 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 259 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 260 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 261 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 262 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 263 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 264 | fi | ||
| 265 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 266 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 271 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 267 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 272 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 268 | run·the·following·command·to·determine·which·package·owns·it: | 273 | run·the·following·command·to·determine·which·package·owns·it: |
| 269 | $·rpm·-qf·FILENAME | 274 | $·rpm·-qf·FILENAME |
| 270 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 271 | $·sudo·rpm·--setugids·PACKAGENAME | 276 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 291, 14 lines modified | Offset 291, 40 lines modified | ||
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 294 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 294 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 295 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 295 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 296 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 296 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 297 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 297 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 303 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 304 | declare·-A·SETPERMS_RPM_DICT | ||
| 305 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 306 | #·is·expected·by·the·RPM·database | ||
| 307 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 308 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 309 | do | ||
| 310 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 311 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 312 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 313 | done | ||
| 314 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 315 | #·correct·values | ||
| 316 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 317 | do | ||
| 318 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 319 | done | ||
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 303 | -·name:·Read·list·of·files·with·incorrect·ownership | 325 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 304 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 326 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 376, 40 lines modified | Offset 402, 14 lines modified | ||
| 376 | ··-·PCI-DSSv4-11.5.2 | 402 | ··-·PCI-DSSv4-11.5.2 |
| 377 | ··-·high_complexity | 403 | ··-·high_complexity |
| 378 | ··-·high_severity | 404 | ··-·high_severity |
| 379 | ··-·medium_disruption | 405 | ··-·medium_disruption |
| 380 | ··-·no_reboot_needed | 406 | ··-·no_reboot_needed |
| 381 | ··-·restrict_strategy | 407 | ··-·restrict_strategy |
| 382 | ··-·rpm_verify_ownership | 408 | ··-·rpm_verify_ownership |
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 384 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 385 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 386 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 387 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 388 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1739421/1746792 bytes (99.58%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037dd0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037de0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037de0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037df0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037df0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037e00:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037e00:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e10:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e10:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e20:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e20:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e40:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e40:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037e50:·2d31·3 | 00037e50:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037e60:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e60:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e70:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e70:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e80:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e80:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e90:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e90:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037ea0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037ea0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037eb0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037eb0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ec0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ec0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15054, 202 lines modified | Offset 15054, 202 lines modified | ||
| 0003acd0:·6172·6765·743d·2223·6964·6d35·3638·3422··arget="#idm5684" | 0003acd0:·6172·6765·743d·2223·6964·6d35·3638·3422··arget="#idm5684" | ||
| 0003ace0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003ace0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003acf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003acf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003ad00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003ad00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ad10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ad10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ad20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ad20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ad30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ad30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ad40:·6f6e·20 | 0003ad40:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | ||
| 0003ad50:·7 | 0003ad50:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003ad60:· | 0003ad60:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003ad70:· | 0003ad70:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003ad80:· | 0003ad80:·2220·6964·3d22·6964·6d35·3638·3422·3e3c··"·id="idm5684">< | ||
| 0003ad90:· | 0003ad90:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003ada0:·6 | 0003ada0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003adb0:· | 0003adb0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003adc0:· | 0003adc0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003add0:· | 0003add0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003ade0:·6 | 0003ade0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003adf0:· | 0003adf0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003ae00:· | 0003ae00:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003ae10:· | 0003ae10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003ae20:· | 0003ae20:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003ae30:· | 0003ae30:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003ae40:· | 0003ae40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003ae50:· | 0003ae50:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003ae60:· | 0003ae60:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003ae70:· | 0003ae70:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003ae80:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003ae90:·6520·2d2d·6164·643d·6169·6465·0a3c·2f63··e·--add=aide.</c | |||
| 0003aea0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003aeb0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003aec0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ae | 0003ae80:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | ||
| 0003ae90:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003aea0:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003aeb0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003aec0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003aed0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003aee0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003aef0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003af00:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003af10:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003af20:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003af30:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003af40:·3536·3835·2220·7461·6269·6e64·6578·3d22··5685"·tabindex=" | |||
| 0003af50:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003af60:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003af70:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003af80:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003af90:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003afa0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003afb0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003afc0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003afd0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003afe0:·7073·6522·2069·643d·2269·646d·3536·3835··pse"·id="idm5685 | |||
| 0003aff0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b000:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b010:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b020:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b030:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b040:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b050:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b060:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b070:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b080:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b090:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b0a0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b0b0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b0c0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b0d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b0e0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003b0f0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b100:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b110:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b120:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003b130:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003b140:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003b150:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003b160:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003b170:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003b180:·203b·2074·6865·6e0a·2020·2020·7975·6d20···;·then.····yum· | |||
| 0003b190:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b1a0:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 0003b1b0:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b1c0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b1d0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b1e0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b1f0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b200:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b210:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003 | 0003b220:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003aef0:·6964·6d35·3638·3522·2074·6162·696e·6465··idm5685"·tabinde | |||
| 0003af00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003af10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003af20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003af30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003af40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003af50:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003 | 0003b230:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b240:·7267·6574·3d22·2369·646d·3536·3836·2220··rget="#idm5686"· | |||
| 0003b250:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b260:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b270:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b280:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b290:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b2a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b2b0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b2c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b2d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b2e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| Max diff block lines reached; 21832746/21860538 bytes (99.87%) of diff not shown. | |||
| Offset 14301, 16 lines modified | Offset 14301, 16 lines modified | ||
| 00037dc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037dc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037dd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037dd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037de0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037de0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037df0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037df0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e30:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037e40:·2d31·3 | 00037e40:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037e50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037ea0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037ea0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037eb0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037eb0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15059, 202 lines modified | Offset 15059, 202 lines modified | ||
| 0003ad20:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | 0003ad20:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | ||
| 0003ad30:·3834·2220·7461·6269·6e64·6578·3d22·3022··84"·tabindex="0" | 0003ad30:·3834·2220·7461·6269·6e64·6578·3d22·3022··84"·tabindex="0" | ||
| 0003ad40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ad40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ad50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ad50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ad60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ad60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ad70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ad70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ad80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ad80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ad90:·6174·696f·6e20· | 0003ad90:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | ||
| 0003ada0:· | 0003ada0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003adb0:· | 0003adb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003adc0:·6 | 0003adc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003add0:· | 0003add0:·7073·6522·2069·643d·2269·646d·3536·3834··pse"·id="idm5684 | ||
| 0003ade0:· | 0003ade0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003adf0:· | 0003adf0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003ae00:·7 | 0003ae00:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003ae10:·65 | 0003ae10:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003ae20:·6 | 0003ae20:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003ae30:·6 | 0003ae30:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003ae40:·6 | 0003ae40:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003ae50:· | 0003ae50:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003ae60:· | 0003ae60:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003ae70:· | 0003ae70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003ae80:· | 0003ae80:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003ae90:·6 | 0003ae90:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003aea0:· | 0003aea0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003aeb0:· | 0003aeb0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003aec0:· | 0003aec0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003aed0:· | 0003aed0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | ||
| 0003aee0:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 0003aef0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003af00:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003af10:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003af20:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003af30:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003af40:·3d22·2369·646d·3536·3835·2220·7461·6269··="#idm5685"·tabi | |||
| 0003af50:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003af60:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003af70:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003af80:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003af90:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003afa0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003afb0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003afc0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003afd0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003afe0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003aff0:·2269·646d·3536·3835·223e·3c74·6162·6c65··"idm5685"><table | |||
| 0003b000:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b010:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b020:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b030:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003 | 0003aee0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | ||
| 0003aef0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003af00:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003af10:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003af20:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003af30:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003af40:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003af50:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003af60:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003af70:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003af80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003af90:·6964·6d35·3638·3522·2074·6162·696e·6465··idm5685"·tabinde | |||
| 0003afa0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003afb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003afc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003afd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003afe0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003aff0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b000:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b010:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b020:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b030:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b040:·3638·3522·3e3c·7461·626c·6520·636c·6173··685"><table·clas | |||
| 0003b050:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b060:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b070:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b080:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b090:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b0a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b0b0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b0 | 0003b0c0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b0 | 0003b0d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b0 | 0003b0e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b0f0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b100:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b110:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b120:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b130:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b140:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b150:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b160:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b170:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b180:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b190:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b1a0:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b1b0:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b1c0:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b1d0:·6465·2220·3b20·7468·656e·0a20·2020·2079··de"·;·then.····y | |||
| 0003b1e0:·756d·2069·6e73·7461·6c6c·202d·7920·2261··um·install·-y·"a | |||
| 0003b1f0:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003b200:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b210:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b220:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b230:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b240:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b250:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b260:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b270:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b280:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b290:·2d74·6172·6765·743d·2223·6964·6d35·3638··-target="#idm568 | |||
| Max diff block lines reached; 22121530/22149322 bytes (99.87%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037de0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037df0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037df0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037e00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037e00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037e10:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037e10:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e40:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e40:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e50:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e50:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037e60:·2d31·3 | 00037e60:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037e70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037ea0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037ea0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037eb0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037eb0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037ec0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037ec0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ed0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ed0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15045, 202 lines modified | Offset 15045, 202 lines modified | ||
| 0003ac40:·7461·7267·6574·3d22·2369·646d·3536·3834··target="#idm5684 | 0003ac40:·7461·7267·6574·3d22·2369·646d·3536·3834··target="#idm5684 | ||
| 0003ac50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ac50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ac60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ac60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ac70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ac70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ac80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ac80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ac90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ac90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003aca0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003aca0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003acb0:·696f·6e20· | 0003acb0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | ||
| 0003acc0:· | 0003acc0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003acd0:· | 0003acd0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003ace0:·6 | 0003ace0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003acf0:· | 0003acf0:·6522·2069·643d·2269·646d·3536·3834·223e··e"·id="idm5684"> | ||
| 0003ad00:· | 0003ad00:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003ad10:· | 0003ad10:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003ad20:· | 0003ad20:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003ad30:· | 0003ad30:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003ad40:· | 0003ad40:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003ad50:· | 0003ad50:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003ad60:· | 0003ad60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003ad70:· | 0003ad70:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003ad80:· | 0003ad80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003ad90:· | 0003ad90:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003ada0:·6 | 0003ada0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003adb0:·6 | 0003adb0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003adc0:· | 0003adc0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003add0:· | 0003add0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003ade0:· | 0003ade0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003adf0:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003ae00:·6765·202d·2d61·6464·3d61·6964·650a·3c2f··ge·--add=aide.</ | |||
| 0003ae10:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003ae20:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003ae30:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003a | 0003adf0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | ||
| 0003ae00:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003ae10:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003ae20:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003ae30:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003ae40:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003ae50:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003ae60:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ae70:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ae80:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ae90:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003aea0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003aeb0:·6d35·3638·3522·2074·6162·696e·6465·783d··m5685"·tabindex= | |||
| 0003aec0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003aed0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003aee0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003aef0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003af00:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003af10:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003af20:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003af30:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003af40:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003af50:·6170·7365·2220·6964·3d22·6964·6d35·3638··apse"·id="idm568 | |||
| 0003af60:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003af70:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003af80:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003af90:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003afa0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003afb0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003afc0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003afd0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003afe0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003aff0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b000:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b010:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b020:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b030:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b040:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b050:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003b060:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b070:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b080:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b090:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 0003b0a0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 0003b0b0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 0003b0c0:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 0003b0d0:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 0003b0e0:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 0003b0f0:·2220·3b20·7468·656e·0a20·2020·2079·756d··"·;·then.····yum | |||
| 0003b100:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003b110:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 0003b120:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003b130:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003b140:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003b150:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b160:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003b170:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b180:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003 | 0003b190:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003ae60:·2369·646d·3536·3835·2220·7461·6269·6e64··#idm5685"·tabind | |||
| 0003ae70:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003ae80:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003ae90:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003aea0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003aeb0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003aec0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003aed0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003aee0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003aef0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003af00:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003af10:·646d·3536·3835·223e·3c74·6162·6c65·2063··dm5685"><table·c | |||
| 0003af20:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003af30:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003af40:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003af50:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003af60:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003af70:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003 | 0003b1a0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| Max diff block lines reached; 8952974/8980766 bytes (99.69%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 33 lines modified | Offset 113, 41 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·--add=aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | include·install_aide | 125 | include·install_aide |
| 132 | class·install_aide·{ | 126 | class·install_aide·{ |
| 133 | ··package·{·'aide': | 127 | ··package·{·'aide': |
| 134 | ····ensure·=>·'installed', | 128 | ····ensure·=>·'installed', |
| 135 | ··} | 129 | ··} |
| 136 | } | 130 | } |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 138 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 139 | ····yum·install·-y·"aide" | ||
| 140 | fi | ||
| 141 | else | ||
| 142 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 143 | fi | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | -·name:·Ensure·aide·is·installed | 149 | -·name:·Ensure·aide·is·installed |
| 143 | ··package: | 150 | ··package: |
| Offset 159, 29 lines modified | Offset 167, 21 lines modified | ||
| 159 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | [[packages]] | 170 | [[packages]] |
| 163 | name·=·"aide" | 171 | name·=·"aide" |
| 164 | version·=·"*" | 172 | version·=·"*" |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 172 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 173 | ····yum·install·-y·"aide" | ||
| 174 | fi | ||
| 178 | package·--add=aide | ||
| 175 | else | ||
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 177 | fi | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 206, 14 lines modified | Offset 206, 28 lines modified | ||
| 206 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 206 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 209 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 209 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 214 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 215 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 216 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 217 | ····yum·install·-y·"aide" | ||
| 218 | fi | ||
| 219 | /usr/sbin/aide·--init | ||
| 220 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 221 | else | ||
| 222 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 223 | fi | ||
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 218 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 229 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 219 | ··ansible.builtin.package: | 230 | ··ansible.builtin.package: |
| Offset 287, 28 lines modified | Offset 301, 14 lines modified | ||
| 287 | ··-·PCI-DSSv4-11.5.2 | 301 | ··-·PCI-DSSv4-11.5.2 |
| 288 | ··-·aide_build_database | 302 | ··-·aide_build_database |
| Max diff block lines reached; 991077/996879 bytes (99.42%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037dd0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037de0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037de0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037df0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037df0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037e00:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037e00:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037e10:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037e10:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037e20:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037e20:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2028·6173·206f·6620·3230·323 | 00037e40:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00037e50:·3 | 00037e50:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 00037e60:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037e60:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037e70:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037e70:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037e80:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037e80:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037e90:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037e90:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037ea0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037ea0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037eb0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037eb0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037ec0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037ec0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 14718, 183 lines modified | Offset 14718, 183 lines modified | ||
| 000397d0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 000397d0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 000397e0:·3035·3734·2220·7461·6269·6e64·6578·3d22··0574"·tabindex=" | 000397e0:·3035·3734·2220·7461·6269·6e64·6578·3d22··0574"·tabindex=" | ||
| 000397f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000397f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039840:·6469·6174·696f·6e20· | 00039840:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 00039850:· | 00039850:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039860:· | 00039860:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039870:· | 00039870:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039880:·6 | 00039880:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | ||
| 00039890:·3 | 00039890:·3537·3422·3e3c·7461·626c·6520·636c·6173··574"><table·clas | ||
| 000398a0:· | 000398a0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 000398b0:· | 000398b0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 000398c0:·6 | 000398c0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 000398d0:·6 | 000398d0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 000398e0:· | 000398e0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 000398f0:· | 000398f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 00039900:· | 00039900:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 00039910:· | 00039910:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 00039920:· | 00039920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 00039930:· | 00039930:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 00039940:· | 00039940:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 00039950:· | 00039950:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 00039960:· | 00039960:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 00039970:· | 00039970:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 00039980:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 00039990:·6c75·6465·2069·6e73·7461·6c6c·5f64·6e66··lude·install_dnf | |||
| 000399a0:·2d61·7574·6f6d·6174·6963·0a0a·636c·6173··-automatic..clas | |||
| 000399b0:·7320·696e·7374·616c·6c5f·646e·662d·6175··s·install_dnf-au | |||
| 000399c0:·746f·6d61·7469·6320·7b0a·2020·7061·636b··tomatic·{.··pack | |||
| 000399d0:·6167·6520·7b20·2764·6e66·2d61·7574·6f6d··age·{·'dnf-autom | |||
| 000399e0:·6174·6963·273a·0a20·2020·2065·6e73·7572··atic':.····ensur | |||
| 000399f0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 00039a00:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 00039a10:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00039a20:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00039a30:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00039a40:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00039a50:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00039a60:·6d31·3035·3735·2220·7461·6269·6e64·6578··m10575"·tabindex | |||
| 00039a70:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 00039a80:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 00039a90:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 00039aa0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 00039ab0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 00039ac0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 00039ad0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00039ae0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00039af0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00039b00:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 00039b10:·3537·3522·3e3c·7461·626c·6520·636c·6173··575"><table·clas | |||
| 00039b20:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039b30:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00039b40:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00039b50:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039b60:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039b70:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039b80:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039b90:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039ba0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039bb0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00039bc0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00039bd0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039be0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039bf0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00039 | 00039c00:·653e·3c70·7265·3e3c·636f·6465·3e0a·6966··e><pre><code>.if | ||
| 00039990:·7061·636b·6167·6520·2d2d·6164·643d·646e··package·--add=dn | |||
| 000399a0:·662d·6175·746f·6d61·7469·630a·3c2f·636f··f-automatic.</co | |||
| 000399b0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 000399c0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 000399d0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 00039 | 00039c10:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | ||
| 00039c20:·7420·2264·6e66·2d61·7574·6f6d·6174·6963··t·"dnf-automatic | |||
| 00039c30:·2220·3b20·7468·656e·0a20·2020·2079·756d··"·;·then.····yum | |||
| 00039c40:·2069·6e73·7461·6c6c·202d·7920·2264·6e66···install·-y·"dnf | |||
| 00039c50:·2d61·7574·6f6d·6174·6963·220a·6669·0a3c··-automatic".fi.< | |||
| 00039c60:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00039c70:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00039c80:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00039c90:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00039ca0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00039cb0:·2223·6964·6d31·3035·3736·2220·7461·6269··"#idm10576"·tabi | |||
| 00039cc0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00039cd0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00039ce0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00039cf0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00039d00:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00039d10:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 00039d20:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00039d30:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039d40:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039d50:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039d60:·3d22·6964·6d31·3035·3736·223e·3c74·6162··="idm10576"><tab | |||
| 00039d70:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039d80:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039d90:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039da0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039db0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039dc0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039dd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039de0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039df0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039e00:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039e10:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039e20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039e30:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039e40:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 00039e50:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| Max diff block lines reached; 3611395/3636565 bytes (99.31%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 80, 33 lines modified | Offset 80, 35 lines modified | ||
| 80 | $·sudo·yum·install·dnf-automatic | 80 | $·sudo·yum·install·dnf-automatic |
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 92 | package·--add=dnf-automatic | ||
| 93 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 94 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 95 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 96 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 97 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 98 | include·install_dnf-automatic | 92 | include·install_dnf-automatic |
| 99 | class·install_dnf-automatic·{ | 93 | class·install_dnf-automatic·{ |
| 100 | ··package·{·'dnf-automatic': | 94 | ··package·{·'dnf-automatic': |
| 101 | ····ensure·=>·'installed', | 95 | ····ensure·=>·'installed', |
| 102 | ··} | 96 | ··} |
| 103 | } | 97 | } |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 103 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 104 | ····yum·install·-y·"dnf-automatic" | ||
| 105 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 109 | -·name:·Ensure·dnf-automatic·is·installed | 111 | -·name:·Ensure·dnf-automatic·is·installed |
| 110 | ··package: | 112 | ··package: |
| Offset 120, 23 lines modified | Offset 122, 21 lines modified | ||
| 120 | ··-·no_reboot_needed | 122 | ··-·no_reboot_needed |
| 121 | ··-·package_dnf-automatic_installed | 123 | ··-·package_dnf-automatic_installed |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | [[packages]] | 125 | [[packages]] |
| 124 | name·=·"dnf-automatic" | 126 | name·=·"dnf-automatic" |
| 125 | version·=·"*" | 127 | version·=·"*" |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | package·--add=dnf-automatic | ||
| 131 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 132 | ····yum·install·-y·"dnf-automatic" | ||
| 133 | fi | ||
| 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 136 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 136 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 137 | automatic.conf. | 137 | automatic.conf. |
| 138 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 138 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 139 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 139 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 140 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 140 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 146, 36 lines modified | Offset 146, 14 lines modified | ||
| 146 | Severity: ··medium | 146 | Severity: ··medium |
| 147 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 147 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 148 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 148 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 149 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 149 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 150 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 150 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 151 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 151 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 152 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 152 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 158 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 159 | ··ini_file: | ||
| 160 | ····dest:·/etc/dnf/automatic.conf | ||
| 161 | ····section:·commands | ||
| 162 | ····option:·apply_updates | ||
| 163 | ····value:·'yes' | ||
| 164 | ····create:·true | ||
| 165 | ··tags: | ||
| 166 | ··-·NIST-800-53-CM-6(a) | ||
| 167 | ··-·NIST-800-53-SI-2(5) | ||
| 168 | ··-·NIST-800-53-SI-2(c) | ||
| 169 | ··-·dnf-automatic_apply_updates | ||
| 170 | ··-·low_complexity | ||
| 171 | ··-·medium_disruption | ||
| 172 | ··-·medium_severity | ||
| 173 | ··-·no_reboot_needed | ||
| 174 | ··-·unknown_strategy | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 176 | found=false | 154 | found=false |
| 177 | #·set·value·in·all·files·if·they·contain·section·or·key | 155 | #·set·value·in·all·files·if·they·contain·section·or·key |
| 178 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | 156 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do |
| 179 | ····if·[·!·-e·"$f"·];·then | 157 | ····if·[·!·-e·"$f"·];·then |
| Offset 204, 48 lines modified | Offset 182, 48 lines modified | ||
| 204 | if·!·$found·;·then | 182 | if·!·$found·;·then |
| 205 | ····file=$(echo·"/etc/dnf/automatic.conf"·|·cut·-f1·-d·'·') | 183 | ····file=$(echo·"/etc/dnf/automatic.conf"·|·cut·-f1·-d·'·') |
| 206 | ····mkdir·-p·"$(dirname·"$file")" | 184 | ····mkdir·-p·"$(dirname·"$file")" |
| 207 | ····echo·-e·"[commands]\napply_updates=yes"·>>·"$file" | 185 | ····echo·-e·"[commands]\napply_updates=yes"·>>·"$file" |
| Max diff block lines reached; 238098/243685 bytes (97.71%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037d80:·3032·3 | 00037d80:·3032·352d·3132·2d31·3129·0a20·2020·2020··025-12-11).····· | ||
| 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15105, 301 lines modified | Offset 15105, 301 lines modified | ||
| 0003b000:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b000:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b010:·6964·6d35·3334·3622·2074·6162·696e·6465··idm5346"·tabinde | 0003b010:·6964·6d35·3334·3622·2074·6162·696e·6465··idm5346"·tabinde | ||
| 0003b020:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b020:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b030:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b030:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b040:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b040:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b050:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b050:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b060:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b060:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b070:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b080:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b090:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b0a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b0c0:·3334·3622·3e3c·7072·653e·3c63·6f64·653e··346"><pre><code> | |||
| 0003b0d0:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | |||
| 0003b0e0:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | |||
| 0003b0f0:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | |||
| 0003b100:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | |||
| 0003b110:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | |||
| 0003b120:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | |||
| 0003b130:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | |||
| 0003b140:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | |||
| 0003b150:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b160:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | |||
| 0003b170:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | |||
| 0003b180:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | |||
| 0003b190:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | |||
| 0003b1a0:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | |||
| 0003b1b0:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003b1c0:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | |||
| 0003b1d0:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | |||
| 0003b1e0:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | |||
| 0003b1f0:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | |||
| 0003b200:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | |||
| 0003b210:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | |||
| 0003b220:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | |||
| 0003b230:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | |||
| 0003b240:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | |||
| 0003b250:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | |||
| 0003b260:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | |||
| 0003b270:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b280:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | |||
| 0003b290:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | |||
| 0003b2a0:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | |||
| 0003b2b0:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | |||
| 0003b2c0:·7461·6c6c·0a20·2020·200a·6669·0a3c·2f63··tall.····.fi.</c | |||
| 0003b2d0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b2e0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b2f0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b300:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b310:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b320:·6964·6d35·3334·3722·2074·6162·696e·6465··idm5347"·tabinde | |||
| 0003b330:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b340:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b350:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b360:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b370:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b | 0003b380:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b | 0003b390:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003b | 0003b3a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b3b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b | 0003b3c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b3d0:·646d·3533·3437·223e·3c74·6162·6c65·2063··dm5347"><table·c | ||
| 0003b | 0003b3e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b | 0003b3f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b | 0003b400:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b | 0003b410:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b | 0003b420:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b | 0003b430:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003b | 0003b440:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b450:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b460:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003b | 0003b470:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b | 0003b480:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b | 0003b490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b | 0003b4a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b4b0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003b | 0003b4c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b | 0003b4d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·2753··<code>-·name:·'S | ||
| 0003b | 0003b4e0:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003b | 0003b4f0:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003b | 0003b500:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003b | 0003b510:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003b | 0003b520:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003b | 0003b530:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003b | 0003b540:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003b | 0003b550:·656e·3a20·616e·7369·626c·655f·6469·7374··en:·ansible_dist | ||
| 0003b | 0003b560:·7269·6275·7469·6f6e·2069·6e20·5b20·2246··ribution·in·[·"F | ||
| 0003b | 0003b570:·6564·6f72·6122·2c20·2252·6564·4861·7422··edora",·"RedHat" | ||
| 0003b | 0003b580:·2c20·2243·656e·744f·5322·2c20·224f·7261··,·"CentOS",·"Ora | ||
| 0003b | 0003b590:·636c·654c·696e·7578·2220·5d0a·2020·7461··cleLinux"·].··ta | ||
| 0003b | 0003b5a0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003b | 0003b5b0:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003b | 0003b5c0:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b | 0003b5d0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b | 0003b5e0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b | 0003b5f0:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b | 0003b600:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b | 0003b610:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b | 0003b620:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b | 0003b630:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b | 0003b640:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003b650:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b | 0003b660:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b | 0003b670:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b | 0003b680:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b | 0003b690:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b | 0003b6a0:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b | 0003b6b0:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b | 0003b6c0:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b | 0003b6d0:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003b | 0003b6e0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| Max diff block lines reached; 10099205/10140521 bytes (99.59%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:8 | 44 | ····*·cpe:/o:oracle:linux:8 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 96, 14 lines modified | Offset 96, 27 lines modified | ||
| 96 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 96 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 97 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 97 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 104 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 105 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 106 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 107 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 108 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 109 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 110 | fi | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 108 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 116 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 109 | ··set_fact: | 117 | ··set_fact: |
| Offset 230, 27 lines modified | Offset 243, 14 lines modified | ||
| 230 | ··-·PCI-DSSv4-11.5.2 | 243 | ··-·PCI-DSSv4-11.5.2 |
| 231 | ··-·high_complexity | 244 | ··-·high_complexity |
| 232 | ··-·high_severity | 245 | ··-·high_severity |
| 233 | ··-·medium_disruption | 246 | ··-·medium_disruption |
| 234 | ··-·no_reboot_needed | 247 | ··-·no_reboot_needed |
| 235 | ··-·restrict_strategy | 248 | ··-·restrict_strategy |
| 236 | ··-·rpm_verify_hashes | 249 | ··-·rpm_verify_hashes |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 239 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 240 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 241 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 242 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 243 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 244 | fi | ||
| 245 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 250 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 246 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 251 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 247 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 252 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 248 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 253 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 249 | $·rpm·-qf·FILENAME | 254 | $·rpm·-qf·FILENAME |
| 250 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 255 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 271, 14 lines modified | Offset 271, 44 lines modified | ||
| 271 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 271 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 272 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 272 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 273 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 273 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 274 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 274 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 275 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 275 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 276 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 276 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 277 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 277 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 278 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 279 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 280 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 281 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 282 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 283 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 284 | declare·-A·SETPERMS_RPM_DICT | ||
| 285 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 286 | #·is·expected·by·the·RPM·database | ||
| 287 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 288 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 289 | do | ||
| 290 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 291 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 292 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 293 | ········do | ||
| 294 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 295 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 296 | ········done | ||
| 297 | done | ||
| 298 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 299 | #·correct·values | ||
| 300 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 301 | do | ||
| 302 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 303 | done | ||
| 278 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 304 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 279 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 305 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 280 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 306 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 281 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 307 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 282 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 308 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 283 | -·name:·Read·list·of·files·with·incorrect·permissions | 309 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 284 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 310 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 356, 44 lines modified | Offset 386, 14 lines modified | ||
| 356 | ··-·PCI-DSSv4-11.5.2 | 386 | ··-·PCI-DSSv4-11.5.2 |
| 357 | ··-·high_complexity | 387 | ··-·high_complexity |
| 358 | ··-·high_severity | 388 | ··-·high_severity |
| 359 | ··-·medium_disruption | 389 | ··-·medium_disruption |
| 360 | ··-·no_reboot_needed | 390 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 391 | ··-·restrict_strategy |
| 362 | ··-·rpm_verify_permissions | 392 | ··-·rpm_verify_permissions |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 925314/933611 bytes (99.11%) of diff not shown. | |||
| Offset 14330, 15 lines modified | Offset 14330, 15 lines modified | ||
| 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038000:·323 | 00038000:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15098, 203 lines modified | Offset 15098, 203 lines modified | ||
| 0003af90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003af90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003afa0:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | 0003afa0:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | ||
| 0003afb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003afb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003afc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003afc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003afd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003afd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003afe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003afe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003aff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003aff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b000:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003b000:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | ||
| 0003b010:· | 0003b010:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | ||
| 0003b020:· | 0003b020:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b030:·6 | 0003b030:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b040:· | 0003b040:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b050:· | 0003b050:·3d22·6964·6d35·3638·3422·3e3c·7461·626c··="idm5684"><tabl | ||
| 0003b060:·6 | 0003b060:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b070:· | 0003b070:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b080:·6 | 0003b080:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b090:·6 | 0003b090:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b0a0:· | 0003b0a0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b0b0:· | 0003b0b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b0c0:· | 0003b0c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b0d0:· | 0003b0d0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b0e0:· | 0003b0e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b0f0:· | 0003b0f0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b100:· | 0003b100:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b110:· | 0003b110:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b120:· | 0003b120:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b130:·6 | 0003b130:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003b140:· | 0003b140:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b150:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 0003b160:·6164·643d·6169·6465·0a3c·2f63·6f64·653e··add=aide.</code> | |||
| 0003b170:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b180:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b1 | 0003b150:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | ||
| 0003b160:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b170:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b180:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b190:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b1a0:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b1b0:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b1c0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b1d0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b1e0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b1f0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b200:·7461·7267·6574·3d22·2369·646d·3536·3835··target="#idm5685 | |||
| 0003b210:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b220:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b230:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b240:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b250:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b260:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b270:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b280:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b290:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b2a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b2b0:·2069·643d·2269·646d·3536·3835·223e·3c74···id="idm5685"><t | |||
| 0003b2c0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b2d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b2e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b2f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b300:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b310:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b320:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b330:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b340:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b350:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b360:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b370:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b380:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b390:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b3a0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b3b0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003b3c0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b3d0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b3e0:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 0003b3f0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003b400:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003b410:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003b420:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 0003b430:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003b440:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003b450:·6865·6e0a·2020·2020·7975·6d20·696e·7374··hen.····yum·inst | |||
| 0003b460:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003b470:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b480:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b490:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b4a0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b4b0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b4c0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b4d0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b4e0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b4f0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b500:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b510:·3d22·2369·646d·3536·3836·2220·7461·6269··="#idm5686"·tabi | |||
| 0003b520:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b530:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b540:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b550:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b560:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b570:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b580:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b590:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b5a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b | 0003b5b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b1b0:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b1c0:·3638·3522·2074·6162·696e·6465·783d·2230··685"·tabindex="0 | |||
| 0003b1d0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b1e0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b1f0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b200:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b210:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b220:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| Max diff block lines reached; 8981197/9008989 bytes (99.69%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and |
| 51 | ··············Organizations·(NIST·800-171) | 51 | ··············Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:8 | 54 | ····*·cpe:/o:oracle:linux:8 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 63 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 33 lines modified | Offset 108, 41 lines modified | ||
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 120 | package·--add=aide | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | include·install_aide | 120 | include·install_aide |
| 127 | class·install_aide·{ | 121 | class·install_aide·{ |
| 128 | ··package·{·'aide': | 122 | ··package·{·'aide': |
| 129 | ····ensure·=>·'installed', | 123 | ····ensure·=>·'installed', |
| 130 | ··} | 124 | ··} |
| 131 | } | 125 | } |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 132 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 133 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 134 | ····yum·install·-y·"aide" | ||
| 135 | fi | ||
| 136 | else | ||
| 137 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 138 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 144 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 145 | ··package: |
| Offset 154, 29 lines modified | Offset 162, 21 lines modified | ||
| 154 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 163 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 157 | [[packages]] | 165 | [[packages]] |
| 158 | name·=·"aide" | 166 | name·=·"aide" |
| 159 | version·=·"*" | 167 | version·=·"*" |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 168 | ····yum·install·-y·"aide" | ||
| 169 | fi | ||
| 173 | package·--add=aide | ||
| 170 | else | ||
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 172 | fi | ||
| 173 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 174 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 174 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 175 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 175 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 176 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 176 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 177 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 192, 14 lines modified | Offset 192, 27 lines modified | ||
| 192 | ············_\x8i_\x8s_\x8m······1446 | 192 | ············_\x8i_\x8s_\x8m······1446 |
| 193 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 193 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 194 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 194 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 195 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 195 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 196 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 196 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 197 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 197 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 198 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 198 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 200 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 201 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 202 | fips-mode-setup·--enable | ||
| 203 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 204 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 205 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 206 | fi | ||
| 207 | else | ||
| 208 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 209 | fi | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 211 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 212 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 213 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 214 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 204 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 215 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 205 | ··command:·/usr/bin/fips-mode-setup·--check | 216 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 260, 27 lines modified | Offset 273, 14 lines modified | ||
| 260 | ··-·NIST-800-53-SC-13 | 273 | ··-·NIST-800-53-SC-13 |
| 261 | ··-·enable_dracut_fips_module | 274 | ··-·enable_dracut_fips_module |
| 262 | ··-·high_severity | 275 | ··-·high_severity |
| Max diff block lines reached; 1107578/1113969 bytes (99.43%) of diff not shown. | |||
| Offset 14297, 16 lines modified | Offset 14297, 16 lines modified | ||
| 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037df0:·2020·2861·7320·6f66·2032·3032·3 | 00037df0:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 00037e00:·2d3 | 00037e00:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15142, 301 lines modified | Offset 15142, 301 lines modified | ||
| 0003b250:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b250:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b260:·6964·6d35·3334·3622·2074·6162·696e·6465··idm5346"·tabinde | 0003b260:·6964·6d35·3334·3622·2074·6162·696e·6465··idm5346"·tabinde | ||
| 0003b270:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b270:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b280:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b280:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b290:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b290:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b2a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b2a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b2b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b2b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b2c0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b2d0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b2e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b2f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b300:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b310:·3334·3622·3e3c·7072·653e·3c63·6f64·653e··346"><pre><code> | |||
| 0003b320:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | |||
| 0003b330:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | |||
| 0003b340:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | |||
| 0003b350:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | |||
| 0003b360:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | |||
| 0003b370:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | |||
| 0003b380:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | |||
| 0003b390:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | |||
| 0003b3a0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b3b0:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | |||
| 0003b3c0:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | |||
| 0003b3d0:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | |||
| 0003b3e0:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | |||
| 0003b3f0:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | |||
| 0003b400:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003b410:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | |||
| 0003b420:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | |||
| 0003b430:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | |||
| 0003b440:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | |||
| 0003b450:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | |||
| 0003b460:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | |||
| 0003b470:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | |||
| 0003b480:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | |||
| 0003b490:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | |||
| 0003b4a0:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | |||
| 0003b4b0:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | |||
| 0003b4c0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b4d0:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | |||
| 0003b4e0:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | |||
| 0003b4f0:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | |||
| 0003b500:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | |||
| 0003b510:·7461·6c6c·0a20·2020·200a·6669·0a3c·2f63··tall.····.fi.</c | |||
| 0003b520:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b530:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b540:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b550:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b560:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b570:·6964·6d35·3334·3722·2074·6162·696e·6465··idm5347"·tabinde | |||
| 0003b580:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b590:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b5a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b5b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b5c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b | 0003b5d0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b | 0003b5e0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003b | 0003b5f0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b600:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b | 0003b610:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b620:·646d·3533·3437·223e·3c74·6162·6c65·2063··dm5347"><table·c | ||
| 0003b | 0003b630:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b | 0003b640:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b | 0003b650:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b | 0003b660:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b | 0003b670:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b | 0003b680:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003b | 0003b690:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b6a0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b6b0:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003b | 0003b6c0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b | 0003b6d0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b | 0003b6e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b | 0003b6f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b700:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003b | 0003b710:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b | 0003b720:·3c63·6f64·653e·2d20·6e61·6d65·3a20·2753··<code>-·name:·'S | ||
| 0003b | 0003b730:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003b | 0003b740:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003b | 0003b750:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003b | 0003b760:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003b | 0003b770:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003b | 0003b780:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003b | 0003b790:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003b | 0003b7a0:·656e·3a20·616e·7369·626c·655f·6469·7374··en:·ansible_dist | ||
| 0003b | 0003b7b0:·7269·6275·7469·6f6e·2069·6e20·5b20·2246··ribution·in·[·"F | ||
| 0003b | 0003b7c0:·6564·6f72·6122·2c20·2252·6564·4861·7422··edora",·"RedHat" | ||
| 0003b | 0003b7d0:·2c20·2243·656e·744f·5322·2c20·224f·7261··,·"CentOS",·"Ora | ||
| 0003b | 0003b7e0:·636c·654c·696e·7578·2220·5d0a·2020·7461··cleLinux"·].··ta | ||
| 0003b | 0003b7f0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003b | 0003b800:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003b | 0003b810:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b | 0003b820:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b | 0003b830:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b | 0003b840:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b | 0003b850:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b | 0003b860:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b | 0003b870:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b | 0003b880:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b | 0003b890:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003b8a0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b | 0003b8b0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b | 0003b8c0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b | 0003b8d0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b | 0003b8e0:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b | 0003b8f0:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b | 0003b900:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b | 0003b910:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b | 0003b920:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| Max diff block lines reached; 6232970/6274424 bytes (99.34%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:oracle:linux:8 | 45 | ····*·cpe:/o:oracle:linux:8 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 103, 14 lines modified | Offset 103, 27 lines modified | ||
| 103 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 103 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 104 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 104 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 105 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 105 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 106 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 106 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 108 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 112 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 113 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 114 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 115 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 116 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 117 | fi | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 115 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 123 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 116 | ··set_fact: | 124 | ··set_fact: |
| Offset 237, 27 lines modified | Offset 250, 14 lines modified | ||
| 237 | ··-·PCI-DSSv4-11.5.2 | 250 | ··-·PCI-DSSv4-11.5.2 |
| 238 | ··-·high_complexity | 251 | ··-·high_complexity |
| 239 | ··-·high_severity | 252 | ··-·high_severity |
| 240 | ··-·medium_disruption | 253 | ··-·medium_disruption |
| 241 | ··-·no_reboot_needed | 254 | ··-·no_reboot_needed |
| 242 | ··-·restrict_strategy | 255 | ··-·restrict_strategy |
| 243 | ··-·rpm_verify_hashes | 256 | ··-·rpm_verify_hashes |
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 245 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 246 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 247 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 248 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 249 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 250 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 251 | fi | ||
| 252 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 257 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 253 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 258 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 254 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 259 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 255 | run·the·following·command·to·determine·which·package·owns·it: | 260 | run·the·following·command·to·determine·which·package·owns·it: |
| 256 | $·rpm·-qf·FILENAME | 261 | $·rpm·-qf·FILENAME |
| 257 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 262 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 258 | $·sudo·rpm·--setugids·PACKAGENAME | 263 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 276, 14 lines modified | Offset 276, 40 lines modified | ||
| 276 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 276 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 277 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 277 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 278 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 278 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 279 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 279 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 281 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 281 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 288 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 289 | declare·-A·SETPERMS_RPM_DICT | ||
| 290 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 291 | #·is·expected·by·the·RPM·database | ||
| 292 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 293 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 294 | do | ||
| 295 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 296 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 297 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 298 | done | ||
| 299 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 300 | #·correct·values | ||
| 301 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 302 | do | ||
| 303 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 304 | done | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 306 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 307 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 308 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 309 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 288 | -·name:·Read·list·of·files·with·incorrect·ownership | 310 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 289 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 311 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 358, 40 lines modified | Offset 384, 14 lines modified | ||
| 358 | ··-·PCI-DSSv4-11.5.2 | 384 | ··-·PCI-DSSv4-11.5.2 |
| 359 | ··-·high_complexity | 385 | ··-·high_complexity |
| 360 | ··-·high_severity | 386 | ··-·high_severity |
| 361 | ··-·medium_disruption | 387 | ··-·medium_disruption |
| 362 | ··-·no_reboot_needed | 388 | ··-·no_reboot_needed |
| 363 | ··-·restrict_strategy | 389 | ··-·restrict_strategy |
| 364 | ··-·rpm_verify_ownership | 390 | ··-·rpm_verify_ownership |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 370 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 668175/676064 bytes (98.83%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3235·2d31·322d·3131·290a·2020··f·2025-12-11).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15167, 301 lines modified | Offset 15167, 301 lines modified | ||
| 0003b3e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b3e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b3f0:·646d·3533·3436·2220·7461·6269·6e64·6578··dm5346"·tabindex | 0003b3f0:·646d·3533·3436·2220·7461·6269·6e64·6578··dm5346"·tabindex | ||
| 0003b400:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b400:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b410:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b410:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b420:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b420:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b430:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b430:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b440:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b440:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b450:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b460:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b470:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b480:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b490:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b4a0:·3436·223e·3c70·7265·3e3c·636f·6465·3e0a··46"><pre><code>. | |||
| 0003b4b0:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | |||
| 0003b4c0:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | |||
| 0003b4d0:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | |||
| 0003b4e0:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | |||
| 0003b4f0:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | |||
| 0003b500:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | |||
| 0003b510:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | |||
| 0003b520:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | |||
| 0003b530:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003b540:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | |||
| 0003b550:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | |||
| 0003b560:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | |||
| 0003b570:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | |||
| 0003b580:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | |||
| 0003b590:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b5a0:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | |||
| 0003b5b0:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | |||
| 0003b5c0:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | |||
| 0003b5d0:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | |||
| 0003b5e0:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | |||
| 0003b5f0:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | |||
| 0003b600:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | |||
| 0003b610:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | |||
| 0003b620:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | |||
| 0003b630:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | |||
| 0003b640:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | |||
| 0003b650:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003b660:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | |||
| 0003b670:·220a·0a20·2020·200a·2020·2020·7975·6d20··"..····.····yum· | |||
| 0003b680:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | |||
| 0003b690:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | |||
| 0003b6a0:·616c·6c0a·2020·2020·0a66·690a·3c2f·636f··all.····.fi.</co | |||
| 0003b6b0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b6c0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b6d0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b6e0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b6f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b700:·646d·3533·3437·2220·7461·6269·6e64·6578··dm5347"·tabindex | |||
| 0003b710:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b720:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b730:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b740:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b750:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b | 0003b760:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b | 0003b770:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b | 0003b780:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b790:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b7a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003b7b0:·6d35·3334·3722·3e3c·7461·626c·6520·636c··m5347"><table·cl | ||
| 0003b | 0003b7c0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003b7d0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003b7e0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003b7f0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003b800:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003b810:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b | 0003b820:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003b830:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b | 0003b840:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b | 0003b850:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003b860:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b | 0003b870:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003b880:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b | 0003b890:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b | 0003b8a0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b | 0003b8b0:·636f·6465·3e2d·206e·616d·653a·2027·5365··code>-·name:·'Se | ||
| 0003b | 0003b8c0:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003b | 0003b8d0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003b | 0003b8e0:·6c20·636f·6d6d·616e·6427·0a20·2073·6574··l·command'.··set | ||
| 0003b | 0003b8f0:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003b | 0003b900:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003b | 0003b910:·7461·6c6c·5f63·6d64·3a20·7975·6d20·7265··tall_cmd:·yum·re | ||
| 0003b | 0003b920:·696e·7374·616c·6c20·2d79·0a20·2077·6865··install·-y.··whe | ||
| 0003b | 0003b930:·6e3a·2061·6e73·6962·6c65·5f64·6973·7472··n:·ansible_distr | ||
| 0003b | 0003b940:·6962·7574·696f·6e20·696e·205b·2022·4665··ibution·in·[·"Fe | ||
| 0003b | 0003b950:·646f·7261·222c·2022·5265·6448·6174·222c··dora",·"RedHat", | ||
| 0003b | 0003b960:·2022·4365·6e74·4f53·222c·2022·4f72·6163···"CentOS",·"Orac | ||
| 0003b | 0003b970:·6c65·4c69·6e75·7822·205d·0a20·2074·6167··leLinux"·].··tag | ||
| 0003b | 0003b980:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003b | 0003b990:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b | 0003b9a0:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003b | 0003b9b0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003b | 0003b9c0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b | 0003b9d0:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003b | 0003b9e0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b | 0003b9f0:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003b | 0003ba00:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003b | 0003ba10:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003b | 0003ba20:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b | 0003ba30:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003b | 0003ba40:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003b | 0003ba50:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003b | 0003ba60:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003b | 0003ba70:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003b | 0003ba80:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003b | 0003ba90:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003b | 0003baa0:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003b | 0003bab0:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003b | 0003bac0:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| Max diff block lines reached; 17066382/17107698 bytes (99.76%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:8 | 50 | ····*·cpe:/o:oracle:linux:8 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 109, 14 lines modified | Offset 109, 27 lines modified | ||
| 109 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 109 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 110 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 110 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 118 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 119 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 120 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 121 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 122 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 123 | fi | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 121 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 129 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 122 | ··set_fact: | 130 | ··set_fact: |
| Offset 243, 27 lines modified | Offset 256, 14 lines modified | ||
| 243 | ··-·PCI-DSSv4-11.5.2 | 256 | ··-·PCI-DSSv4-11.5.2 |
| 244 | ··-·high_complexity | 257 | ··-·high_complexity |
| 245 | ··-·high_severity | 258 | ··-·high_severity |
| 246 | ··-·medium_disruption | 259 | ··-·medium_disruption |
| 247 | ··-·no_reboot_needed | 260 | ··-·no_reboot_needed |
| 248 | ··-·restrict_strategy | 261 | ··-·restrict_strategy |
| 249 | ··-·rpm_verify_hashes | 262 | ··-·rpm_verify_hashes |
| 250 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 251 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 252 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 253 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 254 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 255 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 256 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 257 | fi | ||
| 258 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 263 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 259 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 264 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 260 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 265 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 261 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 266 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 262 | $·rpm·-qf·FILENAME | 267 | $·rpm·-qf·FILENAME |
| 263 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 268 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 284, 14 lines modified | Offset 284, 44 lines modified | ||
| 284 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 284 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 285 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 285 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 286 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 286 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 287 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 287 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 288 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 288 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 289 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 289 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 290 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 290 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 296 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 297 | declare·-A·SETPERMS_RPM_DICT | ||
| 298 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 299 | #·is·expected·by·the·RPM·database | ||
| 300 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 301 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 302 | do | ||
| 303 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 304 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 305 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 306 | ········do | ||
| 307 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 308 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 309 | ········done | ||
| 310 | done | ||
| 311 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 312 | #·correct·values | ||
| 313 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 314 | do | ||
| 315 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 316 | done | ||
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 318 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 319 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 320 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 321 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 296 | -·name:·Read·list·of·files·with·incorrect·permissions | 322 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 297 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 323 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 369, 44 lines modified | Offset 399, 14 lines modified | ||
| 369 | ··-·PCI-DSSv4-11.5.2 | 399 | ··-·PCI-DSSv4-11.5.2 |
| 370 | ··-·high_complexity | 400 | ··-·high_complexity |
| 371 | ··-·high_severity | 401 | ··-·high_severity |
| 372 | ··-·medium_disruption | 402 | ··-·medium_disruption |
| 373 | ··-·no_reboot_needed | 403 | ··-·no_reboot_needed |
| 374 | ··-·restrict_strategy | 404 | ··-·restrict_strategy |
| 375 | ··-·rpm_verify_permissions | 405 | ··-·rpm_verify_permissions |
| 376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 377 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 378 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1311110/1319382 bytes (99.37%) of diff not shown. | |||
| Offset 14305, 15 lines modified | Offset 14305, 15 lines modified | ||
| 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e70:·323 | 00037e70:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15073, 203 lines modified | Offset 15073, 203 lines modified | ||
| 0003ae00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ae00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ae10:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | 0003ae10:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | ||
| 0003ae20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ae20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ae30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ae30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ae40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ae40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ae50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ae50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ae60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ae60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003ae70:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003ae70:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | ||
| 0003ae80:· | 0003ae80:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | ||
| 0003ae90:· | 0003ae90:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003aea0:·6 | 0003aea0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003aeb0:· | 0003aeb0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003aec0:· | 0003aec0:·3d22·6964·6d35·3638·3422·3e3c·7461·626c··="idm5684"><tabl | ||
| 0003aed0:·6 | 0003aed0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003aee0:· | 0003aee0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003aef0:·6 | 0003aef0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003af00:·6 | 0003af00:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003af10:· | 0003af10:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003af20:· | 0003af20:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003af30:· | 0003af30:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003af40:· | 0003af40:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003af50:· | 0003af50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003af60:· | 0003af60:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003af70:· | 0003af70:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003af80:· | 0003af80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003af90:· | 0003af90:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003afa0:·6 | 0003afa0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003afb0:· | 0003afb0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003afc0:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 0003afd0:·6164·643d·6169·6465·0a3c·2f63·6f64·653e··add=aide.</code> | |||
| 0003afe0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003aff0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003 | 0003afc0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | ||
| 0003afd0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003afe0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003aff0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b000:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b010:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b020:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b030:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b040:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b050:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b060:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b070:·7461·7267·6574·3d22·2369·646d·3536·3835··target="#idm5685 | |||
| 0003b080:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b090:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b0a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b0b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b0c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b0d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b0e0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b0f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b100:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b110:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b120:·2069·643d·2269·646d·3536·3835·223e·3c74···id="idm5685"><t | |||
| 0003b130:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b140:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b150:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b160:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b170:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b180:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b190:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b1a0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b1b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b1c0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b1d0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b1e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b1f0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b200:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b210:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b220:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003b230:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b240:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b250:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | |||
| 0003b260:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | |||
| 0003b270:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | |||
| 0003b280:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | |||
| 0003b290:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | |||
| 0003b2a0:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003b2b0:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003b2c0:·6865·6e0a·2020·2020·7975·6d20·696e·7374··hen.····yum·inst | |||
| 0003b2d0:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003b2e0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b2f0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b300:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b310:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b320:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b330:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b340:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b350:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b360:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b370:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b380:·3d22·2369·646d·3536·3836·2220·7461·6269··="#idm5686"·tabi | |||
| 0003b390:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b3a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b3b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b3c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b3d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b3e0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b3f0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b400:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b410:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b | 0003b420:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b430:·3d22·6964·6d35·3638·3622·3e3c·7461·626c··="idm5686"><tabl | |||
| 0003b440:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b450:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b460:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b470:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b480:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b490:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b4a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| Max diff block lines reached; 8981197/9008989 bytes (99.69%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 33 lines modified | Offset 101, 41 lines modified | ||
| 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | package·--add=aide | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 119 | include·install_aide | 113 | include·install_aide |
| 120 | class·install_aide·{ | 114 | class·install_aide·{ |
| 121 | ··package·{·'aide': | 115 | ··package·{·'aide': |
| 122 | ····ensure·=>·'installed', | 116 | ····ensure·=>·'installed', |
| 123 | ··} | 117 | ··} |
| 124 | } | 118 | } |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 125 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 126 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 127 | ····yum·install·-y·"aide" | ||
| 128 | fi | ||
| 129 | else | ||
| 130 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 131 | fi | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 138 | ··package: |
| Offset 147, 29 lines modified | Offset 155, 21 lines modified | ||
| 147 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 148 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | [[packages]] | 158 | [[packages]] |
| 151 | name·=·"aide" | 159 | name·=·"aide" |
| 152 | version·=·"*" | 160 | version·=·"*" |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 160 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 161 | ····yum·install·-y·"aide" | ||
| 162 | fi | ||
| 166 | package·--add=aide | ||
| 163 | else | ||
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 165 | fi | ||
| 166 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 167 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 167 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 168 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 168 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 169 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 169 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 170 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 185, 14 lines modified | Offset 185, 27 lines modified | ||
| 185 | ············_\x8i_\x8s_\x8m······1446 | 185 | ············_\x8i_\x8s_\x8m······1446 |
| 186 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 186 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 187 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 187 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 188 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 188 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 189 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 189 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 190 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 190 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 191 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 191 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 195 | fips-mode-setup·--enable | ||
| 196 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 197 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 198 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 199 | fi | ||
| 200 | else | ||
| 201 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 202 | fi | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 197 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 208 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 198 | ··command:·/usr/bin/fips-mode-setup·--check | 209 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 253, 27 lines modified | Offset 266, 14 lines modified | ||
| 253 | ··-·NIST-800-53-SC-13 | 266 | ··-·NIST-800-53-SC-13 |
| 254 | ··-·enable_dracut_fips_module | 267 | ··-·enable_dracut_fips_module |
| 255 | ··-·high_severity | 268 | ··-·high_severity |
| Max diff block lines reached; 1107576/1114014 bytes (99.42%) of diff not shown. | |||
| Offset 14296, 15 lines modified | Offset 14296, 15 lines modified | ||
| 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037de0:·6f66·2032·3032·3 | 00037de0:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15162, 301 lines modified | Offset 15162, 301 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3533·3436·2220·7461·6269·6e64·6578·3d22··5346"·tabindex=" | 0003b3a0:·3533·3436·2220·7461·6269·6e64·6578·3d22··5346"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b410:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b440:·7073·6522·2069·643d·2269·646d·3533·3436··pse"·id="idm5346 | |||
| 0003b450:·223e·3c70·7265·3e3c·636f·6465·3e0a·2320··"><pre><code>.#· | |||
| 0003b460:·4669·6e64·2077·6869·6368·2066·696c·6573··Find·which·files | |||
| 0003b470:·2068·6176·6520·696e·636f·7272·6563·7420···have·incorrect· | |||
| 0003b480:·6861·7368·2028·6e6f·7420·696e·202f·6574··hash·(not·in·/et | |||
| 0003b490:·632c·2062·6563·6175·7365·206f·6620·7468··c,·because·of·th | |||
| 0003b4a0:·6520·7379·7374·656d·2072·656c·6174·6564··e·system·related | |||
| 0003b4b0:·2063·6f6e·6669·6720·6669·6c65·7329·2061···config·files)·a | |||
| 0003b4c0:·6e64·2074·6865·6e20·6765·7420·6669·6c65··nd·then·get·file | |||
| 0003b4d0:·7320·6e61·6d65·730a·6669·6c65·735f·7769··s·names.files_wi | |||
| 0003b4e0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003b4f0:·683d·2224·2872·706d·202d·5661·202d·2d6e··h="$(rpm·-Va·--n | |||
| 0003b500:·6f63·6f6e·6669·6720·7c20·6772·6570·202d··oconfig·|·grep·- | |||
| 0003b510:·4520·275e·2e2e·3527·207c·2061·776b·2027··E·'^..5'·|·awk·' | |||
| 0003b520:·7b70·7269·6e74·2024·4e46·7d27·2029·220a··{print·$NF}'·)". | |||
| 0003b530:·0a69·6620·5b20·2d6e·2022·2466·696c·6573··.if·[·-n·"$files | |||
| 0003b540:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b550:·6861·7368·2220·5d3b·2074·6865·6e0a·2020··hash"·];·then.·· | |||
| 0003b560:·2020·2320·4672·6f6d·2066·696c·6573·206e····#·From·files·n | |||
| 0003b570:·616d·6573·2067·6574·2070·6163·6b61·6765··ames·get·package | |||
| 0003b580:·206e·616d·6573·2061·6e64·2063·6861·6e67···names·and·chang | |||
| 0003b590:·6520·6e65·776c·696e·6520·746f·2073·7061··e·newline·to·spa | |||
| 0003b5a0:·6365·2c20·6265·6361·7573·6520·7270·6d20··ce,·because·rpm· | |||
| 0003b5b0:·7772·6974·6573·2065·6163·6820·7061·636b··writes·each·pack | |||
| 0003b5c0:·6167·6520·746f·206e·6577·206c·696e·650a··age·to·new·line. | |||
| 0003b5d0:·2020·2020·7061·636b·6167·6573·5f74·6f5f······packages_to_ | |||
| 0003b5e0:·7265·696e·7374·616c·6c3d·2224·2872·706d··reinstall="$(rpm | |||
| 0003b5f0:·202d·7166·2024·6669·6c65·735f·7769·7468···-qf·$files_with | |||
| 0003b600:·5f69·6e63·6f72·7265·6374·5f68·6173·6820··_incorrect_hash· | |||
| 0003b610:·7c20·7472·2027·5c6e·2720·2720·2729·220a··|·tr·'\n'·'·')". | |||
| 0003b620:·0a20·2020·200a·2020·2020·7975·6d20·7265··.····.····yum·re | |||
| 0003b630:·696e·7374·616c·6c20·2d79·2024·7061·636b··install·-y·$pack | |||
| 0003b640:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | |||
| 0003b650:·6c0a·2020·2020·0a66·690a·3c2f·636f·6465··l.····.fi.</code | |||
| 0003b660:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b670:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b680:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b690:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b6a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b6b0:·3533·3437·2220·7461·6269·6e64·6578·3d22··5347"·tabindex=" | |||
| 0003b6c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b6d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b6e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b6f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b700:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b | 0003b710:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b | 0003b720:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b | 0003b730:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b740:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b750:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003b | 0003b760:·3334·3722·3e3c·7461·626c·6520·636c·6173··347"><table·clas | ||
| 0003b | 0003b770:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b780:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b790:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b7a0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b7b0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b7c0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003b | 0003b7d0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b | 0003b7e0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003b | 0003b7f0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003b | 0003b800:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b810:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b | 0003b820:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b830:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003b | 0003b840:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003b | 0003b850:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b | 0003b860:·6465·3e2d·206e·616d·653a·2027·5365·7420··de>-·name:·'Set· | ||
| 0003b | 0003b870:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003b | 0003b880:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003b | 0003b890:·636f·6d6d·616e·6427·0a20·2073·6574·5f66··command'.··set_f | ||
| 0003b | 0003b8a0:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | ||
| 0003b | 0003b8b0:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | ||
| 0003b | 0003b8c0:·6c6c·5f63·6d64·3a20·7975·6d20·7265·696e··ll_cmd:·yum·rein | ||
| 0003b | 0003b8d0:·7374·616c·6c20·2d79·0a20·2077·6865·6e3a··stall·-y.··when: | ||
| 0003b | 0003b8e0:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | ||
| 0003b | 0003b8f0:·7574·696f·6e20·696e·205b·2022·4665·646f··ution·in·[·"Fedo | ||
| 0003b | 0003b900:·7261·222c·2022·5265·6448·6174·222c·2022··ra",·"RedHat",·" | ||
| 0003b | 0003b910:·4365·6e74·4f53·222c·2022·4f72·6163·6c65··CentOS",·"Oracle | ||
| 0003b | 0003b920:·4c69·6e75·7822·205d·0a20·2074·6167·733a··Linux"·].··tags: | ||
| 0003b | 0003b930:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003b | 0003b940:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b | 0003b950:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b | 0003b960:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b660:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b670:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | |||
| 0003b680:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | |||
| 0003b | 0003b970:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b980:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | |||
| 0003b990:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | |||
| 0003b9a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b | 0003b9b0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b | 0003b9c0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b | 0003b9d0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003b9e0:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b | 0003b9f0:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b | 0003ba00:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b | 0003ba10:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b | 0003ba20:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003b | 0003ba30:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003b | 0003ba40:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| Max diff block lines reached; 16992122/17033438 bytes (99.76%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·8 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·8 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:8 | 44 | ····*·cpe:/o:oracle:linux:8 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 106, 14 lines modified | Offset 106, 27 lines modified | ||
| 106 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 106 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 107 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 107 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 114 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 115 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 116 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 117 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 118 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 119 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 120 | fi | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 118 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 126 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 119 | ··set_fact: | 127 | ··set_fact: |
| Offset 240, 27 lines modified | Offset 253, 14 lines modified | ||
| 240 | ··-·PCI-DSSv4-11.5.2 | 253 | ··-·PCI-DSSv4-11.5.2 |
| 241 | ··-·high_complexity | 254 | ··-·high_complexity |
| 242 | ··-·high_severity | 255 | ··-·high_severity |
| 243 | ··-·medium_disruption | 256 | ··-·medium_disruption |
| 244 | ··-·no_reboot_needed | 257 | ··-·no_reboot_needed |
| 245 | ··-·restrict_strategy | 258 | ··-·restrict_strategy |
| 246 | ··-·rpm_verify_hashes | 259 | ··-·rpm_verify_hashes |
| 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 248 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 249 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 250 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 251 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 252 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 253 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 254 | fi | ||
| 255 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 260 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 256 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 261 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 257 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 262 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 258 | run·the·following·command·to·determine·which·package·owns·it: | 263 | run·the·following·command·to·determine·which·package·owns·it: |
| 259 | $·rpm·-qf·FILENAME | 264 | $·rpm·-qf·FILENAME |
| 260 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 265 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 261 | $·sudo·rpm·--setugids·PACKAGENAME | 266 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 279, 14 lines modified | Offset 279, 40 lines modified | ||
| 279 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 279 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 280 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 280 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 283 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 283 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 284 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 284 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 285 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 285 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 291 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 292 | declare·-A·SETPERMS_RPM_DICT | ||
| 293 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 294 | #·is·expected·by·the·RPM·database | ||
| 295 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 296 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 297 | do | ||
| 298 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 299 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 300 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 301 | done | ||
| 302 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 303 | #·correct·values | ||
| 304 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 305 | do | ||
| 306 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 307 | done | ||
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 291 | -·name:·Read·list·of·files·with·incorrect·ownership | 313 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 292 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 314 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 361, 40 lines modified | Offset 387, 14 lines modified | ||
| 361 | ··-·PCI-DSSv4-11.5.2 | 387 | ··-·PCI-DSSv4-11.5.2 |
| 362 | ··-·high_complexity | 388 | ··-·high_complexity |
| 363 | ··-·high_severity | 389 | ··-·high_severity |
| 364 | ··-·medium_disruption | 390 | ··-·medium_disruption |
| 365 | ··-·no_reboot_needed | 391 | ··-·no_reboot_needed |
| 366 | ··-·restrict_strategy | 392 | ··-·restrict_strategy |
| 367 | ··-·rpm_verify_ownership | 393 | ··-·rpm_verify_ownership |
| 368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 373 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1609140/1616899 bytes (99.52%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d40:·2d31·3 | 00037d40:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15091, 301 lines modified | Offset 15091, 301 lines modified | ||
| 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af30:·2223·6964·6d35·3334·3622·2074·6162·696e··"#idm5346"·tabin | 0003af30:·2223·6964·6d35·3334·3622·2074·6162·696e··"#idm5346"·tabin | ||
| 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003af90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003afa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003afb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003afc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003afd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003afe0:·6d35·3334·3622·3e3c·7072·653e·3c63·6f64··m5346"><pre><cod | |||
| 0003aff0:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b000:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b010:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b020:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b030:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b040:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b050:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b060:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b070:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b080:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003b090:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003b0a0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003b0b0:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003b0c0:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003b0d0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b0e0:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003b0f0:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003b100:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003b110:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003b120:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003b130:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003b140:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003b150:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003b160:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003b170:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003b180:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003b190:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b1a0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003b1b0:·2027·2922·0a0a·2020·2020·0a20·2020·2079···')"..····.····y | |||
| 0003b1c0:·756d·2072·6569·6e73·7461·6c6c·202d·7920··um·reinstall·-y· | |||
| 0003b1d0:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003b1e0:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003b1f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b200:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b210:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b220:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b230:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b240:·2223·6964·6d35·3334·3722·2074·6162·696e··"#idm5347"·tabin | |||
| 0003b250:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b260:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b270:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b280:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b290:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003 | 0003b2a0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003 | 0003b2b0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003 | 0003b2c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003 | 0003b2d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003 | 0003b2e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003 | 0003b2f0:·2269·646d·3533·3437·223e·3c74·6162·6c65··"idm5347"><table | ||
| 0003 | 0003b300:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b310:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b320:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b330:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b340:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b350:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003b360:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b370:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b380:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003b390:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b3a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b3b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b3c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b3d0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003b3e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003b3f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003b400:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003b410:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003b420:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003b430:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003b440:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003b450:·696e·7374·616c·6c5f·636d·643a·2079·756d··install_cmd:·yum | ||
| 0003b | 0003b460:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003b470:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003b480:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003b490:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003b4a0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003b4b0:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003b4c0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b | 0003b4d0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003b4e0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003b4f0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003b500:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b | 0003b510:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b | 0003b520:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b | 0003b530:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b | 0003b540:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b | 0003b550:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003b560:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b | 0003b570:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b | 0003b580:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b | 0003b590:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b | 0003b5a0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b | 0003b5b0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b | 0003b5c0:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b | 0003b5d0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b | 0003b5e0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b | 0003b5f0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| Max diff block lines reached; 10535363/10561085 bytes (99.76%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·8 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·8 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:8 | 42 | ····*·cpe:/o:oracle:linux:8 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 93, 14 lines modified | Offset 93, 27 lines modified | ||
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 102 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 103 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 104 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 105 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 106 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 107 | fi | ||
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 105 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 113 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 106 | ··set_fact: | 114 | ··set_fact: |
| Offset 227, 27 lines modified | Offset 240, 14 lines modified | ||
| 227 | ··-·PCI-DSSv4-11.5.2 | 240 | ··-·PCI-DSSv4-11.5.2 |
| 228 | ··-·high_complexity | 241 | ··-·high_complexity |
| 229 | ··-·high_severity | 242 | ··-·high_severity |
| 230 | ··-·medium_disruption | 243 | ··-·medium_disruption |
| 231 | ··-·no_reboot_needed | 244 | ··-·no_reboot_needed |
| 232 | ··-·restrict_strategy | 245 | ··-·restrict_strategy |
| 233 | ··-·rpm_verify_hashes | 246 | ··-·rpm_verify_hashes |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 236 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 237 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 238 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 239 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 240 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 241 | fi | ||
| 242 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 247 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 243 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 248 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 244 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 249 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 245 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 250 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 246 | $·rpm·-qf·FILENAME | 251 | $·rpm·-qf·FILENAME |
| 247 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 252 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 268, 14 lines modified | Offset 268, 44 lines modified | ||
| 268 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 268 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 269 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 269 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 270 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 270 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 280 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 281 | declare·-A·SETPERMS_RPM_DICT | ||
| 282 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 283 | #·is·expected·by·the·RPM·database | ||
| 284 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 285 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 286 | do | ||
| 287 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 288 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 289 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 290 | ········do | ||
| 291 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 292 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 293 | ········done | ||
| 294 | done | ||
| 295 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 296 | #·correct·values | ||
| 297 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 298 | do | ||
| 299 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 300 | done | ||
| 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 280 | -·name:·Read·list·of·files·with·incorrect·permissions | 306 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 281 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 353, 44 lines modified | Offset 383, 14 lines modified | ||
| 353 | ··-·PCI-DSSv4-11.5.2 | 383 | ··-·PCI-DSSv4-11.5.2 |
| 354 | ··-·high_complexity | 384 | ··-·high_complexity |
| 355 | ··-·high_severity | 385 | ··-·high_severity |
| 356 | ··-·medium_disruption | 386 | ··-·medium_disruption |
| 357 | ··-·no_reboot_needed | 387 | ··-·no_reboot_needed |
| 358 | ··-·restrict_strategy | 388 | ··-·restrict_strategy |
| 359 | ··-·rpm_verify_permissions | 389 | ··-·rpm_verify_permissions |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 818257/826423 bytes (99.01%) of diff not shown. | |||
| Offset 14278, 16 lines modified | Offset 14278, 16 lines modified | ||
| 00037c50:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037c50:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037c60:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037c60:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037c70:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037c70:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037c80:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037c80:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037c90:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037c90:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037ca0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037ca0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037cc0:·2020·2861·7320·6f66·2032·3032·3 | 00037cc0:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 00037cd0:·2d3 | 00037cd0:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 00037ce0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037ce0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037cf0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037cf0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037d00:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037d00:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037d10:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037d10:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037d20:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037d20:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037d30:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037d30:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037d40:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037d40:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15076, 203 lines modified | Offset 15076, 203 lines modified | ||
| 0003ae30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ae30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ae40:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | 0003ae40:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | ||
| 0003ae50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ae50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ae60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ae60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ae70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ae70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ae80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ae80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ae90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ae90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003aea0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003aea0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | ||
| 0003aeb0:· | 0003aeb0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | ||
| 0003aec0:· | 0003aec0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003aed0:· | 0003aed0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003aee0:· | 0003aee0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003aef0:· | 0003aef0:·6964·6d35·3638·3422·3e3c·7461·626c·6520··idm5684"><table· | ||
| 0003af00:·6 | 0003af00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003af10:·6 | 0003af10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003af20:· | 0003af20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003af30:·6 | 0003af30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003af40:· | 0003af40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003af50:· | 0003af50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003af60:· | 0003af60:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003af70:·7 | 0003af70:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003af80:·6 | 0003af80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003af90:· | 0003af90:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003afa0:· | 0003afa0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003afb0:· | 0003afb0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003afc0:·7 | 0003afc0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003afd0:·6 | 0003afd0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003afe0:· | 0003afe0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003aff0:·6465·3e0a·7061·636b·6167·6520·2d2d·6164··de>.package·--ad | |||
| 0003b000:·643d·6169·6465·0a3c·2f63·6f64·653e·3c2f··d=aide.</code></ | |||
| 0003b010:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b020:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b030:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b040:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b050:·2d74·6172·6765·743d·2223·6964·6d35·3638··-target="#idm568 | |||
| 0003b060:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 0003b070:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b080:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b090:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b0a0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b0b0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b0c0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b0d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b0e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b0f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b100:·7365·2220·6964·3d22·6964·6d35·3638·3522··se"·id="idm5685" | |||
| 0003b110:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b120:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b130:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b140:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b150:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003 | 0003aff0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | ||
| 0003b000:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b010:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b020:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b030:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b040:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b050:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b060:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b070:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b080:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b090:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b0a0:·7267·6574·3d22·2369·646d·3536·3835·2220··rget="#idm5685"· | |||
| 0003b0b0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b0c0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b0d0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b0e0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b0f0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b100:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b110:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b120:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b130:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b140:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b150:·643d·2269·646d·3536·3835·223e·3c74·6162··d="idm5685"><tab | |||
| 0003b160:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b170:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b180:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b190:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b1a0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b1b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b1c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b1d0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b1 | 0003b1e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b1 | 0003b1f0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b200:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b210:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b220:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b230:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b240:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b250:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0003b260:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b270:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b280:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0003b290:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0003b2a0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0003b2b0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0003b2c0:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0003b2d0:·6966·2021·2072·706d·202d·7120·2d2d·7175··if·!·rpm·-q·--qu | |||
| 0003b2e0:·6965·7420·2261·6964·6522·203b·2074·6865··iet·"aide"·;·the | |||
| 0003b2f0:·6e0a·2020·2020·7975·6d20·696e·7374·616c··n.····yum·instal | |||
| 0003b300:·6c20·2d79·2022·6169·6465·220a·6669·0a0a··l·-y·"aide".fi.. | |||
| 0003b310:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003b320:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003b330:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003b340:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003b350:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003b360:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b370:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b380:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b390:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| Max diff block lines reached; 27985772/28013702 bytes (99.90%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037dd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037de0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037de0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037df0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037df0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e00:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e00:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e10:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e10:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e20:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e20:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e30:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e30:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e40:·3032·3 | 00037e40:·3032·352d·3132·2d31·3129·0a20·2020·2020··025-12-11).····· | ||
| 00037e50:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e50:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e60:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e60:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e70:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e70:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e80:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e80:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037e90:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037e90:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037ea0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037ea0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037eb0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037eb0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15095, 202 lines modified | Offset 15095, 202 lines modified | ||
| 0003af60:·6574·3d22·2369·646d·3536·3834·2220·7461··et="#idm5684"·ta | 0003af60:·6574·3d22·2369·646d·3536·3834·2220·7461··et="#idm5684"·ta | ||
| 0003af70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003af70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003af80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003af80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003af90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003af90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003afa0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003afa0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003afb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003afb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003afc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003afc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003afd0:· | 0003afd0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | ||
| 0003afe0:· | 0003afe0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003aff0:· | 0003aff0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b000:·6 | 0003b000:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b010:· | 0003b010:·643d·2269·646d·3536·3834·223e·3c74·6162··d="idm5684"><tab | ||
| 0003b020:·6 | 0003b020:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b030:· | 0003b030:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b040:· | 0003b040:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b050:·6 | 0003b050:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b060:· | 0003b060:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b070:· | 0003b070:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b080:· | 0003b080:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b090:· | 0003b090:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b0a0:· | 0003b0a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b0b0:· | 0003b0b0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b0c0:· | 0003b0c0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b0d0:· | 0003b0d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b0e0:· | 0003b0e0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b0f0:· | 0003b0f0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003b100:· | 0003b100:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b110:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 0003b120:·2d61·6464·3d61·6964·650a·3c2f·636f·6465··-add=aide.</code | |||
| 0003b130:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b140:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b1 | 0003b110:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | ||
| 0003b120:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b130:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b140:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b150:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b160:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b170:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b180:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b190:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b1a0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b1b0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b1c0:·2d74·6172·6765·743d·2223·6964·6d35·3638··-target="#idm568 | |||
| 0003b1d0:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 0003b1e0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b1f0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b200:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b210:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b220:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b230:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b240:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b250:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b260:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b270:·2220·6964·3d22·6964·6d35·3638·3522·3e3c··"·id="idm5685">< | |||
| 0003b280:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b290:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b2a0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b2b0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b2c0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b2d0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b2e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b2f0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b300:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b310:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b320:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b330:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b340:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b350:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b360:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b370:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003b380:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003b390:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003b3a0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003b3b0:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003b3c0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003b3d0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0003b3e0:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0003b3f0:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 0003b400:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 0003b410:·7468·656e·0a20·2020·2079·756d·2069·6e73··then.····yum·ins | |||
| 0003b420:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| 0003b430:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 0003b440:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003b450:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003b460:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003b470:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b480:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b490:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b4a0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b4b0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b4c0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b4d0:·743d·2223·6964·6d35·3638·3622·2074·6162··t="#idm5686"·tab | |||
| 0003b4e0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b4f0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b500:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b510:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b520:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b530:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b540:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b550:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b560:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b | 0003b570:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b170:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b180:·3536·3835·2220·7461·6269·6e64·6578·3d22··5685"·tabindex=" | |||
| 0003b190:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b1a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b1b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b1c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b1d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b1e0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b1f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| Max diff block lines reached; 27954248/27981902 bytes (99.90%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037dd0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037de0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037de0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037df0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037df0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037e00:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037e00:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e10:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e10:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e20:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e20:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e40:·6173·206f·6620·3230·323 | 00037e40:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037e50:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e50:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e60:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e60:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e70:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e70:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e80:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e80:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e90:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e90:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037ea0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037ea0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037eb0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037eb0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15037, 200 lines modified | Offset 15037, 200 lines modified | ||
| 0003abc0:·6172·6765·743d·2223·6964·6d35·3232·3222··arget="#idm5222" | 0003abc0:·6172·6765·743d·2223·6964·6d35·3232·3222··arget="#idm5222" | ||
| 0003abd0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003abd0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003abe0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003abe0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003abf0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003abf0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ac00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ac00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ac10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ac10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ac20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ac20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ac30:·6f6e·20 | 0003ac30:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | ||
| 0003ac40:·7 | 0003ac40:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003ac50:· | 0003ac50:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003ac60:· | 0003ac60:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003ac70:· | 0003ac70:·2220·6964·3d22·6964·6d35·3232·3222·3e3c··"·id="idm5222">< | ||
| 0003ac80:· | 0003ac80:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003ac90:·6 | 0003ac90:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003aca0:· | 0003aca0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003acb0:· | 0003acb0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003acc0:· | 0003acc0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003acd0:·6 | 0003acd0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003ace0:· | 0003ace0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003acf0:· | 0003acf0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003ad00:· | 0003ad00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003ad10:· | 0003ad10:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003ad20:· | 0003ad20:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003ad30:· | 0003ad30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003ad40:· | 0003ad40:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003ad50:· | 0003ad50:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003ad60:· | 0003ad60:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003ad70:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003ad | 0003ad70:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | ||
| 0003ad80:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003ad90:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003ada0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003adb0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003adc0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003add0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003ade0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003adf0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003ae00:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003ae10:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ae20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ae30:·3532·3233·2220·7461·6269·6e64·6578·3d22··5223"·tabindex=" | |||
| 0003ae40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ae50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ae60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ae70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ae80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ae90:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003aea0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003aeb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003aec0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003aed0:·7073·6522·2069·643d·2269·646d·3532·3233··pse"·id="idm5223 | |||
| 0003aee0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003aef0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003af00:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003af10:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003af20:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003af30:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003af40:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003af50:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003af60:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003af80:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003af90:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003afa0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003afb0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003afc0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003afd0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003afe0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003aff0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b000:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b010:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003b020:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003b030:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003b040:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003b050:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003b060:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003b070:·203b·2074·6865·6e0a·2020·2020·7975·6d20···;·then.····yum· | |||
| 0003b080:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b090:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 0003b0a0:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b0b0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b0c0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b0d0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b0e0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b0f0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b100:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b110:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b120:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b130:·7267·6574·3d22·2369·646d·3532·3234·2220··rget="#idm5224"· | |||
| 0003b140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b1a0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b1b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b1c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b1d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b1e0:·2220·6964·3d22·6964·6d35·3232·3422·3e3c··"·id="idm5224">< | |||
| 0003b1f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b200:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b210:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b220:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b230:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b240:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b250:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b260:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b270:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b280:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b290:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| Max diff block lines reached; 20429893/20457271 bytes (99.87%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037dc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037dd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037dd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037de0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037de0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037df0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037df0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e30:·6173·206f·6620·3230·323 | 00037e30:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037e40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037ea0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037ea0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15042, 201 lines modified | Offset 15042, 201 lines modified | ||
| 0003ac10:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | 0003ac10:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | ||
| 0003ac20:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | 0003ac20:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | ||
| 0003ac30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ac30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ac40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ac40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ac50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ac50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ac60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ac60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ac70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ac70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ac80:·6174·696f·6e20· | 0003ac80:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | ||
| 0003ac90:· | 0003ac90:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003aca0:· | 0003aca0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003acb0:·6 | 0003acb0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003acc0:· | 0003acc0:·7073·6522·2069·643d·2269·646d·3532·3232··pse"·id="idm5222 | ||
| 0003acd0:· | 0003acd0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003ace0:· | 0003ace0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003acf0:·7 | 0003acf0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003ad00:·65 | 0003ad00:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003ad10:·6 | 0003ad10:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003ad20:·6 | 0003ad20:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003ad30:·6 | 0003ad30:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003ad40:· | 0003ad40:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003ad50:· | 0003ad50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003ad60:· | 0003ad60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003ad70:· | 0003ad70:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003ad80:·6 | 0003ad80:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003ad90:· | 0003ad90:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003ada0:· | 0003ada0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003adb0:· | 0003adb0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003adc0:· | 0003adc0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | ||
| 0003add0:·6 | 0003add0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | ||
| 0003ade0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003adf0:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003ae00:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003ae10:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003ae20:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003ae30:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ae40:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ae50:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ae60:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ae70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ae80:·6964·6d35·3232·3322·2074·6162·696e·6465··idm5223"·tabinde | |||
| 0003ae90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003aea0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003aeb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003aec0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003aed0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003aee0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003aef0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003af00:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003af10:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003af20:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003af30:·3232·3322·3e3c·7461·626c·6520·636c·6173··223"><table·clas | |||
| 0003af40:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003af50:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003af60:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003af70:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003af80:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003af90:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003afa0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003afb0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003afc0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003afd0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003afe0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003aff0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b000:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b010:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b020:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b030:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b040:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b050:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b060:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b070:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b080:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b090:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b0a0:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b0b0:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b0c0:·6465·2220·3b20·7468·656e·0a20·2020·2079··de"·;·then.····y | |||
| 0003b0d0:·756d·2069·6e73·7461·6c6c·202d·7920·2261··um·install·-y·"a | |||
| 0003b0e0:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003b0f0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b100:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b110:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b120:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b130:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b140:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b150:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b160:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b170:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b180:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | |||
| 0003b190:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | |||
| 0003b1a0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b1b0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b1c0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b1d0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b1e0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b1f0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b200:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b210:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b220:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b230:·7073·6522·2069·643d·2269·646d·3532·3234··pse"·id="idm5224 | |||
| 0003b240:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b250:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b260:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b270:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b280:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b290:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b2a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b2b0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b2c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b2d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b2e0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b2f0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| Max diff block lines reached; 20718884/20746400 bytes (99.87%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037de0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037df0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037df0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037e00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037e00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037e10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037e10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e50:·6173·206f·6620·3230·323 | 00037e50:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037e60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037ea0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037ea0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037eb0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037eb0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037ec0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037ec0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15028, 200 lines modified | Offset 15028, 200 lines modified | ||
| 0003ab30:·7461·7267·6574·3d22·2369·646d·3532·3232··target="#idm5222 | 0003ab30:·7461·7267·6574·3d22·2369·646d·3532·3232··target="#idm5222 | ||
| 0003ab40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ab40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ab50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ab50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ab60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ab60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ab70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ab70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ab80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ab80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ab90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ab90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aba0:·696f·6e20· | 0003aba0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | ||
| 0003abb0:· | 0003abb0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003abc0:· | 0003abc0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003abd0:·6 | 0003abd0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003abe0:· | 0003abe0:·6522·2069·643d·2269·646d·3532·3232·223e··e"·id="idm5222"> | ||
| 0003abf0:· | 0003abf0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003ac00:· | 0003ac00:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003ac10:· | 0003ac10:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003ac20:· | 0003ac20:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003ac30:· | 0003ac30:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003ac40:· | 0003ac40:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003ac50:· | 0003ac50:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003ac60:· | 0003ac60:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003ac70:· | 0003ac70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003ac80:· | 0003ac80:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003ac90:·6 | 0003ac90:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003aca0:·6 | 0003aca0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003acb0:· | 0003acb0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003acc0:· | 0003acc0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003acd0:· | 0003acd0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003ace0:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003ac | 0003ace0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | ||
| 0003acf0:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003ad00:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003ad10:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003ad20:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003ad30:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003ad40:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003ad50:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ad60:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ad70:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ad80:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ad90:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003ada0:·6d35·3232·3322·2074·6162·696e·6465·783d··m5223"·tabindex= | |||
| 0003adb0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003adc0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003add0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003ade0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003adf0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003ae00:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003ae10:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003ae20:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ae30:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ae40:·6170·7365·2220·6964·3d22·6964·6d35·3232··apse"·id="idm522 | |||
| 0003ae50:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003ae60:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ae70:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ae80:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ae90:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003aea0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003aeb0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003aec0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003aed0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003aee0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003aef0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003af00:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003af10:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003af20:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003af30:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003af40:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003af50:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003af60:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003af70:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003af80:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 0003af90:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 0003afa0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 0003afb0:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 0003afc0:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 0003afd0:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 0003afe0:·2220·3b20·7468·656e·0a20·2020·2079·756d··"·;·then.····yum | |||
| 0003aff0:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003b000:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 0003b010:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003b020:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003b030:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003b040:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b050:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003b060:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b070:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b080:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b090:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b0a0:·6172·6765·743d·2223·6964·6d35·3232·3422··arget="#idm5224" | |||
| 0003b0b0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b0c0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b0d0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b0e0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b0f0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b100:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b110:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b120:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b130:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b140:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b150:·6522·2069·643d·2269·646d·3532·3234·223e··e"·id="idm5224"> | |||
| 0003b160:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b170:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b180:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b190:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b1a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b1b0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b1c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b1d0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b1e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b1f0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b200:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| Max diff block lines reached; 8751415/8778793 bytes (99.69%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 33 lines modified | Offset 111, 41 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package·--add=aide | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | include·install_aide | 123 | include·install_aide |
| 130 | class·install_aide·{ | 124 | class·install_aide·{ |
| 131 | ··package·{·'aide': | 125 | ··package·{·'aide': |
| 132 | ····ensure·=>·'installed', | 126 | ····ensure·=>·'installed', |
| 133 | ··} | 127 | ··} |
| 134 | } | 128 | } |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 136 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 137 | ····yum·install·-y·"aide" | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 141 | ··package: | 148 | ··package: |
| Offset 156, 29 lines modified | Offset 164, 21 lines modified | ||
| 156 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 157 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 159 | [[packages]] | 167 | [[packages]] |
| 160 | name·=·"aide" | 168 | name·=·"aide" |
| 161 | version·=·"*" | 169 | version·=·"*" |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 168 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 169 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 170 | ····yum·install·-y·"aide" | ||
| 171 | fi | ||
| 175 | package·--add=aide | ||
| 172 | else | ||
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 174 | fi | ||
| 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 176 | Run·the·following·command·to·generate·a·new·database: | 177 | Run·the·following·command·to·generate·a·new·database: |
| 177 | $·sudo·/usr/sbin/aide·--init | 178 | $·sudo·/usr/sbin/aide·--init |
| 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 179 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 180 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 181 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 181 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 201, 14 lines modified | Offset 201, 28 lines modified | ||
| 201 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 201 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 202 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 202 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 203 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 203 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 204 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 204 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 205 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 205 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 206 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 206 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 209 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 210 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 211 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 212 | ····yum·install·-y·"aide" | ||
| 213 | fi | ||
| 214 | /usr/sbin/aide·--init | ||
| 215 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 216 | else | ||
| 217 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 218 | fi | ||
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 211 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 212 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 213 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed | 224 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·AIDE·Is·Installed |
| 214 | ··ansible.builtin.package: | 225 | ··ansible.builtin.package: |
| Offset 278, 28 lines modified | Offset 292, 14 lines modified | ||
| 278 | ··-·PCI-DSSv4-11.5.2 | 292 | ··-·PCI-DSSv4-11.5.2 |
| 279 | ··-·aide_build_database | 293 | ··-·aide_build_database |
| Max diff block lines reached; 964801/970645 bytes (99.40%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037dd0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037de0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037de0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037df0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037df0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037e00:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037e00:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037e10:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037e10:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037e20:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037e20:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e30:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e30:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e40:·6620·3230·323 | 00037e40:·6620·3230·3235·2d31·322d·3131·290a·2020··f·2025-12-11).·· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e50:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e60:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e60:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e70:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e70:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e80:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e80:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e90:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e90:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037ea0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037ea0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037eb0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037eb0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 14718, 182 lines modified | Offset 14718, 182 lines modified | ||
| 000397d0:·6574·3d22·2369·646d·3834·3339·2220·7461··et="#idm8439"·ta | 000397d0:·6574·3d22·2369·646d·3834·3339·2220·7461··et="#idm8439"·ta | ||
| 000397e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 000397e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 000397f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 000397f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00039800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00039800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00039810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 00039810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00039820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 00039820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00039830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 00039830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00039840:· | 00039840:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | ||
| 00039850:· | 00039850:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039860:· | 00039860:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039870:·6 | 00039870:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039880:· | 00039880:·643d·2269·646d·3834·3339·223e·3c74·6162··d="idm8439"><tab | ||
| 00039890:·6 | 00039890:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 000398a0:· | 000398a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 000398b0:· | 000398b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 000398c0:·6 | 000398c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 000398d0:· | 000398d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 000398e0:· | 000398e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 000398f0:· | 000398f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 00039900:· | 00039900:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 00039910:· | 00039910:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 00039920:· | 00039920:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 00039930:· | 00039930:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 00039940:· | 00039940:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 00039950:· | 00039950:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 00039960:· | 00039960:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 00039970:· | 00039970:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 00039980:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 00039980:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 00039990:·2d61·6464·3d64·6e66·2d61·7574·6f6d·6174··-add=dnf-automat | |||
| 000399a0:·6963·0a3c·2f63·6f64·653e·3c2f·7072·653e··ic.</code></pre> | |||
| 000399b0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 000399c0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 000399d0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 000399e0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 000399f0:·6765·743d·2223·6964·6d38·3434·3022·2074··get="#idm8440"·t | |||
| 00039a00:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00039a10:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00039a20:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00039a30:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00039a40:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 00039a50:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00039a60:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 00039a70:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00039a80:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00039a90:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00039aa0:·6964·3d22·6964·6d38·3434·3022·3e3c·7461··id="idm8440"><ta | |||
| 00039ab0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00039ac0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00039ad0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00039ae0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00039af0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00039b00:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00039b10:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039b20:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00039b30:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039b40:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00039b50:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00039b60:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039b70:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00039b80:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00039b90:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00039ba0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 00039bb0:·7461·6c6c·5f64·6e66·2d61·7574·6f6d·6174··tall_dnf-automat | |||
| 00039bc0:·6963·0a0a·636c·6173·7320·696e·7374·616c··ic..class·instal | |||
| 00039 | 00039990:·616c·6c5f·646e·662d·6175·746f·6d61·7469··all_dnf-automati | ||
| 00039 | 000399a0:·630a·0a63·6c61·7373·2069·6e73·7461·6c6c··c..class·install | ||
| 00039bf | 000399b0:·5f64·6e66·2d61·7574·6f6d·6174·6963·207b··_dnf-automatic·{ | ||
| 00039c00:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 00039c10:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 00039c20:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 00039c30:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00039c40:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 00039c50:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00039c60:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00039c70:·6765·743d·2223·6964·6d38·3434·3122·2074··get="#idm8441"·t | |||
| 00039c80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00039c90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00039ca0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00039cb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00039cc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 00039cd0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00039ce0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 00039cf0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00039d00:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00039d10:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00039d20:·2069·643d·2269·646d·3834·3431·223e·3c74···id="idm8441"><t | |||
| 00039d30:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00039d40:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00039d50:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00039d60:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00039d70:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00039d80:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 00039d90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039da0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 00039db0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00039dc0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00039dd0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 00039de0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039df0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 00039e00:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 00039e10:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00039e20:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 00039e30:·7375·7265·2064·6e66·2d61·7574·6f6d·6174··sure·dnf-automat | |||
| 00039e40:·6963·2069·7320·696e·7374·616c·6c65·640a··ic·is·installed. | |||
| 00039e50:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 00039e60:·616d·653a·2064·6e66·2d61·7574·6f6d·6174··ame:·dnf-automat | |||
| 00039e70:·6963·0a20·2020·2073·7461·7465·3a20·7072··ic.····state:·pr | |||
| 00039e80:·6573·656e·740a·2020·7461·6773·3a0a·2020··esent.··tags:.·· | |||
| 00039e90:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 00039ea0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| Max diff block lines reached; 3401219/3426113 bytes (99.27%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 80, 33 lines modified | Offset 80, 35 lines modified | ||
| 80 | $·sudo·yum·install·dnf-automatic | 80 | $·sudo·yum·install·dnf-automatic |
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 92 | package·--add=dnf-automatic | ||
| 93 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 94 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 95 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 96 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 97 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 98 | include·install_dnf-automatic | 92 | include·install_dnf-automatic |
| 99 | class·install_dnf-automatic·{ | 93 | class·install_dnf-automatic·{ |
| 100 | ··package·{·'dnf-automatic': | 94 | ··package·{·'dnf-automatic': |
| 101 | ····ensure·=>·'installed', | 95 | ····ensure·=>·'installed', |
| 102 | ··} | 96 | ··} |
| 103 | } | 97 | } |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 103 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 104 | ····yum·install·-y·"dnf-automatic" | ||
| 105 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 109 | -·name:·Ensure·dnf-automatic·is·installed | 111 | -·name:·Ensure·dnf-automatic·is·installed |
| 110 | ··package: | 112 | ··package: |
| Offset 120, 23 lines modified | Offset 122, 21 lines modified | ||
| 120 | ··-·no_reboot_needed | 122 | ··-·no_reboot_needed |
| 121 | ··-·package_dnf-automatic_installed | 123 | ··-·package_dnf-automatic_installed |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | [[packages]] | 125 | [[packages]] |
| 124 | name·=·"dnf-automatic" | 126 | name·=·"dnf-automatic" |
| 125 | version·=·"*" | 127 | version·=·"*" |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | package·--add=dnf-automatic | ||
| 131 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 132 | ····yum·install·-y·"dnf-automatic" | ||
| 133 | fi | ||
| 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 136 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 136 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 137 | automatic.conf. | 137 | automatic.conf. |
| 138 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 138 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 139 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 139 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 140 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 140 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 268, 14 lines modified | Offset 268, 42 lines modified | ||
| 268 | ···························(a),·CM-11(b) | 268 | ···························(a),·CM-11(b) |
| 269 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 269 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 270 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 270 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 271 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 271 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 272 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 272 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 273 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 273 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 | 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 |
| 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 276 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 277 | if·rpm·--quiet·-q·yum;·then | ||
| 278 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 279 | #·adding·any·search·characters·to·the·config·file. | ||
| 280 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 281 | #·shellcheck·disable=SC2059 | ||
| 282 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 283 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 284 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 285 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 286 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 287 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 288 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 289 | yum.conf" | ||
| 290 | else | ||
| 291 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 292 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 293 | ····fi | ||
| 294 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 295 | fi | ||
| 296 | else | ||
| 297 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 298 | fi | ||
| 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 299 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 300 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 301 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 302 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 303 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 280 | -·name:·Gather·the·package·facts | 304 | -·name:·Gather·the·package·facts |
| 281 | ··package_facts: | 305 | ··package_facts: |
| Offset 326, 42 lines modified | Offset 354, 14 lines modified | ||
| Max diff block lines reached; 217745/223781 bytes (97.30%) of diff not shown. | |||
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037fa0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fb0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fb0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fc0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fc0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fd0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fd0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fe0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fe0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ff0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ff0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038000:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038000:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038010:·323 | 00038010:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00038020:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038020:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038030:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038030:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038040:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038040:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038050:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038050:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038060:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038060:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038070:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038070:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038080:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038080:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15041, 192 lines modified | Offset 15041, 192 lines modified | ||
| 0003ac00:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003ac00:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003ac10:·2369·646d·3537·3130·2220·7461·6269·6e64··#idm5710"·tabind | 0003ac10:·2369·646d·3537·3130·2220·7461·6269·6e64··#idm5710"·tabind | ||
| 0003ac20:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003ac20:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003ac30:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003ac30:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003ac40:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003ac40:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003ac50:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003ac50:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003ac60:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003ac60:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003ac70:·5265·6d65·6469·6174·696f·6e20· | 0003ac70:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003ac80:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003ac90:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003aca0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003acb0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003acc0:·3537·3130·223e·3c70·7265·3e3c·636f·6465··5710"><pre><code | |||
| 0003acd0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003ace0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003acf0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003ad00:·7466·6f72·6d73·0a69·6620·2820·5b20·2120··tforms.if·(·[·!· | |||
| 0003ad10:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003ad20:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003ad30:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003ad40:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003ad50:·703b·2021·2028·205b·2022·247b·636f·6e74··p;·!·(·[·"${cont | |||
| 0003ad60:·6169·6e65·723a·2d7d·2220·3d3d·2022·6277··ainer:-}"·==·"bw | |||
| 0003ad70:·7261·702d·6f73·6275·696c·6422·205d·2029··rap-osbuild"·]·) | |||
| 0003ad80:·2029·3b20·7468·656e·0a0a·6669·7073·2d6d···);·then..fips-m | |||
| 0003ad90:·6f64·652d·7365·7475·7020·2d2d·656e·6162··ode-setup·--enab | |||
| 0003ada0:·6c65·0a46·4950·535f·434f·4e46·3d22·2f65··le.FIPS_CONF="/e | |||
| 0003adb0:·7463·2f64·7261·6375·742e·636f·6e66·2e64··tc/dracut.conf.d | |||
| 0003adc0:·2f34·302d·6669·7073·2e63·6f6e·6622·0a69··/40-fips.conf".i | |||
| 0003add0:·6620·2120·6772·6570·2022·5e61·6464·5f64··f·!·grep·"^add_d | |||
| 0003ade0:·7261·6375·746d·6f64·756c·6573·2b3d·5c22··racutmodules+=\" | |||
| 0003adf0:·2066·6970·7320·5c22·2220·2446·4950·535f···fips·\""·$FIPS_ | |||
| 0003ae00:·434f·4e46·3b20·7468·656e·0a20·2020·2065··CONF;·then.····e | |||
| 0003ae10:·6368·6f20·2261·6464·5f64·7261·6375·746d··cho·"add_dracutm | |||
| 0003ae20:·6f64·756c·6573·2b3d·5c22·2066·6970·7320··odules+=\"·fips· | |||
| 0003ae30:·5c22·2220·2667·743b·2667·743b·2024·4649··\""·>>·$FI | |||
| 0003ae40:·5053·5f43·4f4e·460a·6669·0a0a·656c·7365··PS_CONF.fi..else | |||
| 0003ae50:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003ae60:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003ae70:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003ae80:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003ae90:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003aea0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003aeb0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003aec0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003aed0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003aee0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003aef0:·3537·3131·2220·7461·6269·6e64·6578·3d22··5711"·tabindex=" | |||
| 0003af00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003af10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003af20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003af30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003af40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003af50:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003a | 0003af60:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003a | 0003af70:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003a | 0003af80:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003a | 0003af90:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003a | 0003afa0:·3731·3122·3e3c·7461·626c·6520·636c·6173··711"><table·clas | ||
| 0003a | 0003afb0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003a | 0003afc0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003a | 0003afd0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003a | 0003afe0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003a | 0003aff0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003ad20:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | |||
| 0003ad30:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ad40:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003 | 0003b000:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003 | 0003b010:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b020:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003b030:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003b040:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b050:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0003b060:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003 | 0003b070:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b080:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ad80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ad90:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003ada0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003 | 0003b090:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003 | 0003b0a0:·6f64·653e·2d20·6e61·6d65·3a20·4368·6563··ode>-·name:·Chec | ||
| 0003 | 0003b0b0:·6b20·746f·2073·6565·2074·6865·2063·7572··k·to·see·the·cur | ||
| 0003 | 0003b0c0:·7265·6e74·2073·7461·7475·7320·6f66·2046··rent·status·of·F | ||
| 0003b0d0:·4950·5320·6d6f·6465·0a20·2063·6f6d·6d61··IPS·mode.··comma | |||
| 0003b0e0:·6e64·3a20·2f75·7372·2f62·696e·2f66·6970··nd:·/usr/bin/fip | |||
| 0003b0f0:·732d·6d6f·6465·2d73·6574·7570·202d·2d63··s-mode-setup·--c | |||
| 0003b100:·6865·636b·0a20·2072·6567·6973·7465·723a··heck.··register: | |||
| 0003b110:·2069·735f·6669·7073·5f65·6e61·626c·6564···is_fips_enabled | |||
| 0003b120:·0a20·2063·6861·6e67·6564·5f77·6865·6e3a··.··changed_when: | |||
| 0003b130:·2066·616c·7365·0a20·2066·6169·6c65·645f···false.··failed_ | |||
| 0003b140:·7768·656e·3a20·6661·6c73·650a·2020·7768··when:·false.··wh | |||
| 0003b150:·656e·3a20·2820·616e·7369·626c·655f·7669··en:·(·ansible_vi | |||
| 0003b160:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b170:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b180:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b190:·767a·222c·2022·706f·646d·616e·222c·0a20··vz",·"podman",.· | |||
| 0003b1a0:·2020·2022·636f·6e74·6169·6e65·7222·5d20·····"container"]· | |||
| 0003b1b0:·616e·6420·6e6f·7420·2820·6c6f·6f6b·7570··and·not·(·lookup | |||
| 0003b1c0:·2822·656e·7622·2c20·2263·6f6e·7461·696e··("env",·"contain | |||
| 0003b1d0:·6572·2229·203d·3d20·2262·7772·6170·2d6f··er")·==·"bwrap-o | |||
| 0003b1e0:·7362·7569·6c64·2220·2920·290a·2020·7461··sbuild"·)·).··ta | |||
| 0003b1f0:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 0003b200:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b210:·4e49·5354·2d38·3030·2d35·332d·4941·2d37··NIST-800-53-IA-7 | |||
| 0003b220:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b230:·2d53·432d·3132·0a20·202d·204e·4953·542d··-SC-12.··-·NIST- | |||
| 0003b240:·3830·302d·3533·2d53·432d·3132·2832·290a··800-53-SC-12(2). | |||
| 0003b250:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b260:·5343·2d31·3228·3329·0a20·202d·204e·4953··SC-12(3).··-·NIS | |||
| 0003b270:·542d·3830·302d·3533·2d53·432d·3133·0a20··T-800-53-SC-13.· | |||
| 0003b280:·202d·2065·6e61·626c·655f·6472·6163·7574···-·enable_dracut | |||
| Max diff block lines reached; 4599664/4625938 bytes (99.43%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information |
| 51 | ··············Systems·and·Organizations·(NIST·800-171) | 51 | ··············Systems·and·Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:9 | 54 | ····*·cpe:/o:oracle:linux:9 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 97, 14 lines modified | Offset 97, 27 lines modified | ||
| 97 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module | 97 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module |
| 98 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 98 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 99 | ············_\x8i_\x8s_\x8m······1446 | 99 | ············_\x8i_\x8s_\x8m······1446 |
| 100 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 100 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 101 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 101 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 102 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 102 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 106 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 107 | fips-mode-setup·--enable | ||
| 108 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 109 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 110 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 111 | fi | ||
| 112 | else | ||
| 113 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 114 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 120 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 110 | ··command:·/usr/bin/fips-mode-setup·--check | 121 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 162, 27 lines modified | Offset 175, 14 lines modified | ||
| 162 | ··-·NIST-800-53-SC-13 | 175 | ··-·NIST-800-53-SC-13 |
| 163 | ··-·enable_dracut_fips_module | 176 | ··-·enable_dracut_fips_module |
| 164 | ··-·high_severity | 177 | ··-·high_severity |
| 165 | ··-·medium_complexity | 178 | ··-·medium_complexity |
| 166 | ··-·medium_disruption | 179 | ··-·medium_disruption |
| 167 | ··-·reboot_required | 180 | ··-·reboot_required |
| 168 | ··-·restrict_strategy | 181 | ··-·restrict_strategy |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 171 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 172 | fips-mode-setup·--enable | ||
| 173 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 174 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 175 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 176 | fi | ||
| 177 | else | ||
| 178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 179 | fi | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | To·enable·FIPS·mode,·run·the·following·command: | 183 | To·enable·FIPS·mode,·run·the·following·command: |
| 182 | fips-mode-setup·--enable | 184 | fips-mode-setup·--enable |
| 183 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 185 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 184 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 186 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 185 | ····*·Creating·/etc/system-fips | 187 | ····*·Creating·/etc/system-fips |
| Offset 195, 14 lines modified | Offset 195, 41 lines modified | ||
| 195 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 195 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 196 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 196 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 197 | ············_\x8i_\x8s_\x8m······1446 | 197 | ············_\x8i_\x8s_\x8m······1446 |
| 198 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 198 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 199 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 199 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 200 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 200 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 201 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 201 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 203 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 204 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 205 | var_system_crypto_policy='FIPS:OSPP' | ||
| 206 | fips-mode-setup·--enable | ||
| 207 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 208 | rc=$? | ||
| 209 | if·test·"$rc"·=·127;·then | ||
| 210 | » echo·"$stderr_of_call"·>&2 | ||
| 211 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 212 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 213 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 214 | » false··#·end·with·an·error·code | ||
| 215 | elif·test·"$rc"·!=·0;·then | ||
| 216 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 217 | » false··#·end·with·an·error·code | ||
| 218 | fi | ||
| 219 | else | ||
| 220 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 221 | fi | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 207 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 227 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 208 | ··set_fact: | 228 | ··set_fact: |
| Offset 302, 41 lines modified | Offset 329, 14 lines modified | ||
| 302 | ··-·medium_disruption | 329 | ··-·medium_disruption |
| 303 | ··-·reboot_required | 330 | ··-·reboot_required |
| 304 | ··-·restrict_strategy | 331 | ··-·restrict_strategy |
| 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 306 | [customizations] | 333 | [customizations] |
| 307 | fips·=·true | 334 | fips·=·true |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 310 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 311 | var_system_crypto_policy='FIPS:OSPP' | ||
| Max diff block lines reached; 548578/555397 bytes (98.77%) of diff not shown. | |||
| Offset 14296, 16 lines modified | Offset 14296, 16 lines modified | ||
| 00037d70:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d70:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d80:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d80:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037d90:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037d90:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037da0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037da0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037db0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037db0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dc0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dc0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037de0:·2020·2861·7320·6f66·2032·3032·3 | 00037de0:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 00037df0:·2d3 | 00037df0:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 00037e00:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e00:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e10:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e10:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e20:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e20:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e30:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e30:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e40:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e40:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e50:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e50:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e60:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e60:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15136, 301 lines modified | Offset 15136, 301 lines modified | ||
| 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b200:·6d34·3838·3622·2074·6162·696e·6465·783d··m4886"·tabindex= | 0003b200:·6d34·3838·3622·2074·6162·696e·6465·783d··m4886"·tabindex= | ||
| 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b260:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b270:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b280:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b290:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b2a0:·6170·7365·2220·6964·3d22·6964·6d34·3838··apse"·id="idm488 | |||
| 0003b2b0:·3622·3e3c·7072·653e·3c63·6f64·653e·0a23··6"><pre><code>.# | |||
| 0003b2c0:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | |||
| 0003b2d0:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | |||
| 0003b2e0:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | |||
| 0003b2f0:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | |||
| 0003b300:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | |||
| 0003b310:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | |||
| 0003b320:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | |||
| 0003b330:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | |||
| 0003b340:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b350:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | |||
| 0003b360:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | |||
| 0003b370:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | |||
| 0003b380:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | |||
| 0003b390:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | |||
| 0003b3a0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b3b0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | |||
| 0003b3c0:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | |||
| 0003b3d0:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | |||
| 0003b3e0:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | |||
| 0003b3f0:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | |||
| 0003b400:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | |||
| 0003b410:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | |||
| 0003b420:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | |||
| 0003b430:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | |||
| 0003b440:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | |||
| 0003b450:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | |||
| 0003b460:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b470:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | |||
| 0003b480:·0a0a·2020·2020·0a20·2020·2079·756d·2072··..····.····yum·r | |||
| 0003b490:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | |||
| 0003b4a0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003b4b0:·6c6c·0a20·2020·200a·6669·0a3c·2f63·6f64··ll.····.fi.</cod | |||
| 0003b4c0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b4d0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b4e0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b4f0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b500:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b510:·6d34·3838·3722·2074·6162·696e·6465·783d··m4887"·tabindex= | |||
| 0003b520:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b530:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b540:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b550:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b560:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003b570:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b | 0003b580:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b | 0003b590:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003b5a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003b5b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003b5c0:·3438·3837·223e·3c74·6162·6c65·2063·6c61··4887"><table·cla | ||
| 0003b | 0003b5d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003b5e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003b5f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003b600:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003b610:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003b620:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b | 0003b630:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003b640:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b | 0003b650:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b | 0003b660:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003b670:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003b680:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b690:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b | 0003b6a0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b | 0003b6b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b | 0003b6c0:·6f64·653e·2d20·6e61·6d65·3a20·2753·6574··ode>-·name:·'Set | ||
| 0003b | 0003b6d0:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| 0003b | 0003b6e0:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | ||
| 0003b | 0003b6f0:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | ||
| 0003b | 0003b700:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003b | 0003b710:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003b | 0003b720:·616c·6c5f·636d·643a·2079·756d·2072·6569··all_cmd:·yum·rei | ||
| 0003b | 0003b730:·6e73·7461·6c6c·202d·790a·2020·7768·656e··nstall·-y.··when | ||
| 0003b | 0003b740:·3a20·616e·7369·626c·655f·6469·7374·7269··:·ansible_distri | ||
| 0003b | 0003b750:·6275·7469·6f6e·2069·6e20·5b20·2246·6564··bution·in·[·"Fed | ||
| 0003b | 0003b760:·6f72·6122·2c20·2252·6564·4861·7422·2c20··ora",·"RedHat",· | ||
| 0003b | 0003b770:·2243·656e·744f·5322·2c20·224f·7261·636c··"CentOS",·"Oracl | ||
| 0003b | 0003b780:·654c·696e·7578·2220·5d0a·2020·7461·6773··eLinux"·].··tags | ||
| 0003b | 0003b790:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | ||
| 0003b | 0003b7a0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b | 0003b7b0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003b | 0003b7c0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003b | 0003b7d0:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003b | 0003b7e0:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003b | 0003b7f0:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003b | 0003b800:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003b810:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003b | 0003b820:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003b | 0003b830:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b | 0003b840:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003b | 0003b850:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003b | 0003b860:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003b | 0003b870:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003b | 0003b880:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003b | 0003b890:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003b | 0003b8a0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003b | 0003b8b0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003b | 0003b8c0:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| Max diff block lines reached; 6061848/6103302 bytes (99.32%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:9 | 44 | ····*·cpe:/o:oracle:linux:9 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 101, 14 lines modified | Offset 101, 27 lines modified | ||
| 101 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 101 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 110 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 111 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 112 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 113 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 114 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 115 | fi | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 113 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 121 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 114 | ··set_fact: | 122 | ··set_fact: |
| Offset 235, 27 lines modified | Offset 248, 14 lines modified | ||
| 235 | ··-·PCI-DSSv4-11.5.2 | 248 | ··-·PCI-DSSv4-11.5.2 |
| 236 | ··-·high_complexity | 249 | ··-·high_complexity |
| 237 | ··-·high_severity | 250 | ··-·high_severity |
| 238 | ··-·medium_disruption | 251 | ··-·medium_disruption |
| 239 | ··-·no_reboot_needed | 252 | ··-·no_reboot_needed |
| 240 | ··-·restrict_strategy | 253 | ··-·restrict_strategy |
| 241 | ··-·rpm_verify_hashes | 254 | ··-·rpm_verify_hashes |
| 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 243 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 244 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 245 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 246 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 247 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 248 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 249 | fi | ||
| 250 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 255 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 251 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 256 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 252 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 257 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 253 | run·the·following·command·to·determine·which·package·owns·it: | 258 | run·the·following·command·to·determine·which·package·owns·it: |
| 254 | $·rpm·-qf·FILENAME | 259 | $·rpm·-qf·FILENAME |
| 255 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 260 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 256 | $·sudo·rpm·--setugids·PACKAGENAME | 261 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 274, 14 lines modified | Offset 274, 40 lines modified | ||
| 274 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 274 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 276 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 276 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 277 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 277 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 286 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 287 | declare·-A·SETPERMS_RPM_DICT | ||
| 288 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 289 | #·is·expected·by·the·RPM·database | ||
| 290 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 291 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 292 | do | ||
| 293 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 294 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 295 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 296 | done | ||
| 297 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 298 | #·correct·values | ||
| 299 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 300 | do | ||
| 301 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 302 | done | ||
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 303 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 304 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 305 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 306 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 307 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 286 | -·name:·Read·list·of·files·with·incorrect·ownership | 308 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 287 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 309 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 356, 40 lines modified | Offset 382, 14 lines modified | ||
| 356 | ··-·PCI-DSSv4-11.5.2 | 382 | ··-·PCI-DSSv4-11.5.2 |
| 357 | ··-·high_complexity | 383 | ··-·high_complexity |
| 358 | ··-·high_severity | 384 | ··-·high_severity |
| 359 | ··-·medium_disruption | 385 | ··-·medium_disruption |
| 360 | ··-·no_reboot_needed | 386 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 387 | ··-·restrict_strategy |
| 362 | ··-·rpm_verify_ownership | 388 | ··-·rpm_verify_ownership |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 368 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 645892/653773 bytes (98.79%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3235·2d31·322d·3131·290a·2020··f·2025-12-11).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15162, 301 lines modified | Offset 15162, 301 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3438·3836·2220·7461·6269·6e64·6578·3d22··4886"·tabindex=" | 0003b3a0:·3438·3836·2220·7461·6269·6e64·6578·3d22··4886"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b410:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b440:·7073·6522·2069·643d·2269·646d·3438·3836··pse"·id="idm4886 | |||
| 0003b450:·223e·3c70·7265·3e3c·636f·6465·3e0a·2320··"><pre><code>.#· | |||
| 0003b460:·4669·6e64·2077·6869·6368·2066·696c·6573··Find·which·files | |||
| 0003b470:·2068·6176·6520·696e·636f·7272·6563·7420···have·incorrect· | |||
| 0003b480:·6861·7368·2028·6e6f·7420·696e·202f·6574··hash·(not·in·/et | |||
| 0003b490:·632c·2062·6563·6175·7365·206f·6620·7468··c,·because·of·th | |||
| 0003b4a0:·6520·7379·7374·656d·2072·656c·6174·6564··e·system·related | |||
| 0003b4b0:·2063·6f6e·6669·6720·6669·6c65·7329·2061···config·files)·a | |||
| 0003b4c0:·6e64·2074·6865·6e20·6765·7420·6669·6c65··nd·then·get·file | |||
| 0003b4d0:·7320·6e61·6d65·730a·6669·6c65·735f·7769··s·names.files_wi | |||
| 0003b4e0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003b4f0:·683d·2224·2872·706d·202d·5661·202d·2d6e··h="$(rpm·-Va·--n | |||
| 0003b500:·6f63·6f6e·6669·6720·7c20·6772·6570·202d··oconfig·|·grep·- | |||
| 0003b510:·4520·275e·2e2e·3527·207c·2061·776b·2027··E·'^..5'·|·awk·' | |||
| 0003b520:·7b70·7269·6e74·2024·4e46·7d27·2029·220a··{print·$NF}'·)". | |||
| 0003b530:·0a69·6620·5b20·2d6e·2022·2466·696c·6573··.if·[·-n·"$files | |||
| 0003b540:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b550:·6861·7368·2220·5d3b·2074·6865·6e0a·2020··hash"·];·then.·· | |||
| 0003b560:·2020·2320·4672·6f6d·2066·696c·6573·206e····#·From·files·n | |||
| 0003b570:·616d·6573·2067·6574·2070·6163·6b61·6765··ames·get·package | |||
| 0003b580:·206e·616d·6573·2061·6e64·2063·6861·6e67···names·and·chang | |||
| 0003b590:·6520·6e65·776c·696e·6520·746f·2073·7061··e·newline·to·spa | |||
| 0003b5a0:·6365·2c20·6265·6361·7573·6520·7270·6d20··ce,·because·rpm· | |||
| 0003b5b0:·7772·6974·6573·2065·6163·6820·7061·636b··writes·each·pack | |||
| 0003b5c0:·6167·6520·746f·206e·6577·206c·696e·650a··age·to·new·line. | |||
| 0003b5d0:·2020·2020·7061·636b·6167·6573·5f74·6f5f······packages_to_ | |||
| 0003b5e0:·7265·696e·7374·616c·6c3d·2224·2872·706d··reinstall="$(rpm | |||
| 0003b5f0:·202d·7166·2024·6669·6c65·735f·7769·7468···-qf·$files_with | |||
| 0003b600:·5f69·6e63·6f72·7265·6374·5f68·6173·6820··_incorrect_hash· | |||
| 0003b610:·7c20·7472·2027·5c6e·2720·2720·2729·220a··|·tr·'\n'·'·')". | |||
| 0003b620:·0a20·2020·200a·2020·2020·7975·6d20·7265··.····.····yum·re | |||
| 0003b630:·696e·7374·616c·6c20·2d79·2024·7061·636b··install·-y·$pack | |||
| 0003b640:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | |||
| 0003b650:·6c0a·2020·2020·0a66·690a·3c2f·636f·6465··l.····.fi.</code | |||
| 0003b660:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b670:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b680:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b690:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b6a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b6b0:·3438·3837·2220·7461·6269·6e64·6578·3d22··4887"·tabindex=" | |||
| 0003b6c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b6d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b6e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b6f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b700:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b | 0003b710:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b | 0003b720:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b | 0003b730:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b740:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b750:·6c6c·6170·7365·2220·6964·3d22·6964·6d34··llapse"·id="idm4 | ||
| 0003b | 0003b760:·3838·3722·3e3c·7461·626c·6520·636c·6173··887"><table·clas | ||
| 0003b | 0003b770:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b780:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b790:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b7a0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b7b0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b7c0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003b | 0003b7d0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b | 0003b7e0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003b | 0003b7f0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003b | 0003b800:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b810:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b | 0003b820:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b830:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003b | 0003b840:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003b | 0003b850:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b | 0003b860:·6465·3e2d·206e·616d·653a·2027·5365·7420··de>-·name:·'Set· | ||
| 0003b | 0003b870:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003b | 0003b880:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003b | 0003b890:·636f·6d6d·616e·6427·0a20·2073·6574·5f66··command'.··set_f | ||
| 0003b | 0003b8a0:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | ||
| 0003b | 0003b8b0:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | ||
| 0003b | 0003b8c0:·6c6c·5f63·6d64·3a20·7975·6d20·7265·696e··ll_cmd:·yum·rein | ||
| 0003b | 0003b8d0:·7374·616c·6c20·2d79·0a20·2077·6865·6e3a··stall·-y.··when: | ||
| 0003b | 0003b8e0:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | ||
| 0003b | 0003b8f0:·7574·696f·6e20·696e·205b·2022·4665·646f··ution·in·[·"Fedo | ||
| 0003b | 0003b900:·7261·222c·2022·5265·6448·6174·222c·2022··ra",·"RedHat",·" | ||
| 0003b | 0003b910:·4365·6e74·4f53·222c·2022·4f72·6163·6c65··CentOS",·"Oracle | ||
| 0003b | 0003b920:·4c69·6e75·7822·205d·0a20·2074·6167·733a··Linux"·].··tags: | ||
| 0003b | 0003b930:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003b | 0003b940:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b | 0003b950:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b | 0003b960:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b660:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b670:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | |||
| 0003b680:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | |||
| 0003b | 0003b970:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b980:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | |||
| 0003b990:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | |||
| 0003b9a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b | 0003b9b0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b | 0003b9c0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b | 0003b9d0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003b9e0:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b | 0003b9f0:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b | 0003ba00:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b | 0003ba10:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b | 0003ba20:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003b | 0003ba30:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003b | 0003ba40:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| Max diff block lines reached; 15624529/15665845 bytes (99.74%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:9 | 50 | ····*·cpe:/o:oracle:linux:9 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 14 lines modified | Offset 108, 27 lines modified | ||
| 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 117 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 118 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 119 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 120 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 121 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 122 | fi | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 120 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 128 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 121 | ··set_fact: | 129 | ··set_fact: |
| Offset 242, 27 lines modified | Offset 255, 14 lines modified | ||
| 242 | ··-·PCI-DSSv4-11.5.2 | 255 | ··-·PCI-DSSv4-11.5.2 |
| 243 | ··-·high_complexity | 256 | ··-·high_complexity |
| 244 | ··-·high_severity | 257 | ··-·high_severity |
| 245 | ··-·medium_disruption | 258 | ··-·medium_disruption |
| 246 | ··-·no_reboot_needed | 259 | ··-·no_reboot_needed |
| 247 | ··-·restrict_strategy | 260 | ··-·restrict_strategy |
| 248 | ··-·rpm_verify_hashes | 261 | ··-·rpm_verify_hashes |
| 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 250 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 251 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 252 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 253 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 254 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 255 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 256 | fi | ||
| 257 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 262 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 258 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 263 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 259 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 264 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 260 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 265 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 261 | $·rpm·-qf·FILENAME | 266 | $·rpm·-qf·FILENAME |
| 262 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 267 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 283, 14 lines modified | Offset 283, 44 lines modified | ||
| 283 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 283 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 284 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 284 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 285 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 285 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 286 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 286 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 287 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 287 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 288 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 288 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 295 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 296 | declare·-A·SETPERMS_RPM_DICT | ||
| 297 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 298 | #·is·expected·by·the·RPM·database | ||
| 299 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 300 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 301 | do | ||
| 302 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 303 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 304 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 305 | ········do | ||
| 306 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 307 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 308 | ········done | ||
| 309 | done | ||
| 310 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 311 | #·correct·values | ||
| 312 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 313 | do | ||
| 314 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 315 | done | ||
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 316 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 317 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 318 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 319 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 320 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 295 | -·name:·Read·list·of·files·with·incorrect·permissions | 321 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 296 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 322 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 368, 44 lines modified | Offset 398, 14 lines modified | ||
| 368 | ··-·PCI-DSSv4-11.5.2 | 398 | ··-·PCI-DSSv4-11.5.2 |
| 369 | ··-·high_complexity | 399 | ··-·high_complexity |
| 370 | ··-·high_severity | 400 | ··-·high_severity |
| 371 | ··-·medium_disruption | 401 | ··-·medium_disruption |
| 372 | ··-·no_reboot_needed | 402 | ··-·no_reboot_needed |
| 373 | ··-·restrict_strategy | 403 | ··-·restrict_strategy |
| 374 | ··-·rpm_verify_permissions | 404 | ··-·rpm_verify_permissions |
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1215227/1223499 bytes (99.32%) of diff not shown. | |||
| Offset 14299, 16 lines modified | Offset 14299, 16 lines modified | ||
| 00037da0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037da0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037db0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037db0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037dc0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037dc0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037dd0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037dd0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037de0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037de0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037df0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037df0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·2861·7320·6f66·2032·3032·3 | 00037e10:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00037e20:·3 | 00037e20:·3129·0a20·2020·2020·2020·2020·2020·2020··1).············· | ||
| 00037e30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037e70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037e70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037e80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037e80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037e90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037e90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15010, 191 lines modified | Offset 15010, 191 lines modified | ||
| 0003aa10:·2d74·6172·6765·743d·2223·6964·6d35·3731··-target="#idm571 | 0003aa10:·2d74·6172·6765·743d·2223·6964·6d35·3731··-target="#idm571 | ||
| 0003aa20:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003aa20:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003aa30:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003aa30:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003aa40:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003aa40:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003aa50:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003aa50:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003aa60:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003aa60:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003aa70:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003aa70:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003aa80:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003aa90:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003aaa0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003aab0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003aac0:·2220·6964·3d22·6964·6d35·3731·3022·3e3c··"·id="idm5710">< | |||
| 0003aad0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003aae0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003aaf0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003ab00:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003ab10:·6966·2028·205b·2021·202d·6620·2f2e·646f··if·(·[·!·-f·/.do | |||
| 0003ab20:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003ab30:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003ab40:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003ab50:·2026·616d·703b·2661·6d70·3b20·2120·2820···&&·!·(· | |||
| 0003ab60:·5b20·2224·7b63·6f6e·7461·696e·6572·3a2d··[·"${container:- | |||
| 0003ab70:·7d22·203d·3d20·2262·7772·6170·2d6f·7362··}"·==·"bwrap-osb | |||
| 0003ab80:·7569·6c64·2220·5d20·2920·293b·2074·6865··uild"·]·)·);·the | |||
| 0003ab90:·6e0a·0a66·6970·732d·6d6f·6465·2d73·6574··n..fips-mode-set | |||
| 0003aba0:·7570·202d·2d65·6e61·626c·650a·4649·5053··up·--enable.FIPS | |||
| 0003abb0:·5f43·4f4e·463d·222f·6574·632f·6472·6163··_CONF="/etc/drac | |||
| 0003abc0:·7574·2e63·6f6e·662e·642f·3430·2d66·6970··ut.conf.d/40-fip | |||
| 0003abd0:·732e·636f·6e66·220a·6966·2021·2067·7265··s.conf".if·!·gre | |||
| 0003abe0:·7020·225e·6164·645f·6472·6163·7574·6d6f··p·"^add_dracutmo | |||
| 0003abf0:·6475·6c65·732b·3d5c·2220·6669·7073·205c··dules+=\"·fips·\ | |||
| 0003ac00:·2222·2024·4649·5053·5f43·4f4e·463b·2074··""·$FIPS_CONF;·t | |||
| 0003ac10:·6865·6e0a·2020·2020·6563·686f·2022·6164··hen.····echo·"ad | |||
| 0003ac20:·645f·6472·6163·7574·6d6f·6475·6c65·732b··d_dracutmodules+ | |||
| 0003ac30:·3d5c·2220·6669·7073·205c·2222·2026·6774··=\"·fips·\""·> | |||
| 0003ac40:·3b26·6774·3b20·2446·4950·535f·434f·4e46··;>·$FIPS_CONF | |||
| 0003ac50:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003ac60:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003ac70:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003ac80:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003ac90:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003aca0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003acb0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003acc0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003acd0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ace0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003acf0:·6765·743d·2223·6964·6d35·3731·3122·2074··get="#idm5711"·t | |||
| 0003ad00:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ad10:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ad20:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ad30:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ad40:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ad50:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003a | 0003ad60:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003a | 0003ad70:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003a | 0003ad80:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003a | 0003ad90:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003a | 0003ada0:·2069·643d·2269·646d·3537·3131·223e·3c74···id="idm5711"><t | ||
| 0003a | 0003adb0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003a | 0003adc0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003a | 0003add0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003a | 0003ade0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003a | 0003adf0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003ab20:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ab30:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 0003ab40:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a | 0003ae00:·7479·3a3c·2f74·683e·3c74·643e·6d65·6469··ty:</th><td>medi | ||
| 0003a | 0003ae10:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003ae20:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ae30:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | |||
| 0003ae40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a | 0003ae50:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003ab80:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003ab90:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003aba0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003a | 0003ae60:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | ||
| 0003ae70:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ae80:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003ae90:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003a | 0003aea0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003a | 0003aeb0:·616d·653a·2043·6865·636b·2074·6f20·7365··ame:·Check·to·se | ||
| 0003a | 0003aec0:·6520·7468·6520·6375·7272·656e·7420·7374··e·the·current·st | ||
| 0003a | 0003aed0:·6174·7573·206f·6620·4649·5053·206d·6f64··atus·of·FIPS·mod | ||
| 0003aee0:·650a·2020·636f·6d6d·616e·643a·202f·7573··e.··command:·/us | |||
| 0003aef0:·722f·6269·6e2f·6669·7073·2d6d·6f64·652d··r/bin/fips-mode- | |||
| 0003af00:·7365·7475·7020·2d2d·6368·6563·6b0a·2020··setup·--check.·· | |||
| 0003af10:·7265·6769·7374·6572·3a20·6973·5f66·6970··register:·is_fip | |||
| 0003af20:·735f·656e·6162·6c65·640a·2020·6368·616e··s_enabled.··chan | |||
| 0003af30:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | |||
| 0003af40:·2020·6661·696c·6564·5f77·6865·6e3a·2066····failed_when:·f | |||
| 0003af50:·616c·7365·0a20·2077·6865·6e3a·2028·2061··alse.··when:·(·a | |||
| 0003af60:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003af70:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003af80:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003af90:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003afa0:·6f64·6d61·6e22·2c0a·2020·2020·2263·6f6e··odman",.····"con | |||
| 0003afb0:·7461·696e·6572·225d·2061·6e64·206e·6f74··tainer"]·and·not | |||
| 0003afc0:·2028·206c·6f6f·6b75·7028·2265·6e76·222c···(·lookup("env", | |||
| 0003afd0:·2022·636f·6e74·6169·6e65·7222·2920·3d3d···"container")·== | |||
| 0003afe0:·2022·6277·7261·702d·6f73·6275·696c·6422···"bwrap-osbuild" | |||
| 0003aff0:·2029·2029·0a20·2074·6167·733a·0a20·202d···)·).··tags:.··- | |||
| 0003b000:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b010:·3628·6129·0a20·202d·204e·4953·542d·3830··6(a).··-·NIST-80 | |||
| 0003b020:·302d·3533·2d49·412d·370a·2020·2d20·4e49··0-53-IA-7.··-·NI | |||
| 0003b030:·5354·2d38·3030·2d35·332d·5343·2d31·320a··ST-800-53-SC-12. | |||
| 0003b040:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b050:·5343·2d31·3228·3229·0a20·202d·204e·4953··SC-12(2).··-·NIS | |||
| 0003b060:·542d·3830·302d·3533·2d53·432d·3132·2833··T-800-53-SC-12(3 | |||
| 0003b070:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b080:·332d·5343·2d31·330a·2020·2d20·656e·6162··3-SC-13.··-·enab | |||
| Max diff block lines reached; 4598836/4625110 bytes (99.43%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:9 | 46 | ····*·cpe:/o:oracle:linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 89, 14 lines modified | Offset 89, 27 lines modified | ||
| 89 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module | 89 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module |
| 90 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 90 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 91 | ············_\x8i_\x8s_\x8m······1446 | 91 | ············_\x8i_\x8s_\x8m······1446 |
| 92 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 92 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 93 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 94 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 94 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 97 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 98 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 99 | fips-mode-setup·--enable | ||
| 100 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 101 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 102 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 103 | fi | ||
| 104 | else | ||
| 105 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 106 | fi | ||
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 97 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 98 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 99 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 100 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 101 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 112 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 102 | ··command:·/usr/bin/fips-mode-setup·--check | 113 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 154, 27 lines modified | Offset 167, 14 lines modified | ||
| 154 | ··-·NIST-800-53-SC-13 | 167 | ··-·NIST-800-53-SC-13 |
| 155 | ··-·enable_dracut_fips_module | 168 | ··-·enable_dracut_fips_module |
| 156 | ··-·high_severity | 169 | ··-·high_severity |
| 157 | ··-·medium_complexity | 170 | ··-·medium_complexity |
| 158 | ··-·medium_disruption | 171 | ··-·medium_disruption |
| 159 | ··-·reboot_required | 172 | ··-·reboot_required |
| 160 | ··-·restrict_strategy | 173 | ··-·restrict_strategy |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 164 | fips-mode-setup·--enable | ||
| 165 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 166 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 167 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 168 | fi | ||
| 169 | else | ||
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 171 | fi | ||
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | To·enable·FIPS·mode,·run·the·following·command: | 175 | To·enable·FIPS·mode,·run·the·following·command: |
| 174 | fips-mode-setup·--enable | 176 | fips-mode-setup·--enable |
| 175 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 177 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 176 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 178 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 177 | ····*·Creating·/etc/system-fips | 179 | ····*·Creating·/etc/system-fips |
| Offset 187, 14 lines modified | Offset 187, 41 lines modified | ||
| 187 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 187 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 188 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 188 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 189 | ············_\x8i_\x8s_\x8m······1446 | 189 | ············_\x8i_\x8s_\x8m······1446 |
| 190 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 190 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 191 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 191 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 192 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 192 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 193 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 193 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 196 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 197 | var_system_crypto_policy='FIPS:OSPP' | ||
| 198 | fips-mode-setup·--enable | ||
| 199 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 200 | rc=$? | ||
| 201 | if·test·"$rc"·=·127;·then | ||
| 202 | » echo·"$stderr_of_call"·>&2 | ||
| 203 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 204 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 205 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | elif·test·"$rc"·!=·0;·then | ||
| 208 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 209 | » false··#·end·with·an·error·code | ||
| 210 | fi | ||
| 211 | else | ||
| 212 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 213 | fi | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 199 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 219 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 200 | ··set_fact: | 220 | ··set_fact: |
| Offset 294, 41 lines modified | Offset 321, 14 lines modified | ||
| 294 | ··-·medium_disruption | 321 | ··-·medium_disruption |
| 295 | ··-·reboot_required | 322 | ··-·reboot_required |
| 296 | ··-·restrict_strategy | 323 | ··-·restrict_strategy |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 298 | [customizations] | 325 | [customizations] |
| 299 | fips·=·true | 326 | fips·=·true |
| 300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 301 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 302 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 303 | var_system_crypto_policy='FIPS:OSPP' | ||
| Max diff block lines reached; 548577/555435 bytes (98.77%) of diff not shown. | |||
| Offset 14296, 15 lines modified | Offset 14296, 15 lines modified | ||
| 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037de0:·6f66·2032·3032·3 | 00037de0:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15157, 301 lines modified | Offset 15157, 301 lines modified | ||
| 0003b340:·612d·7461·7267·6574·3d22·2369·646d·3438··a-target="#idm48 | 0003b340:·612d·7461·7267·6574·3d22·2369·646d·3438··a-target="#idm48 | ||
| 0003b350:·3836·2220·7461·6269·6e64·6578·3d22·3022··86"·tabindex="0" | 0003b350:·3836·2220·7461·6269·6e64·6578·3d22·3022··86"·tabindex="0" | ||
| 0003b360:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b360:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b370:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b370:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b380:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b380:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b390:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b390:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b3a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b3a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b3b0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b3c0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b3d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b3e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b3f0:·6522·2069·643d·2269·646d·3438·3836·223e··e"·id="idm4886"> | |||
| 0003b400:·3c70·7265·3e3c·636f·6465·3e0a·2320·4669··<pre><code>.#·Fi | |||
| 0003b410:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | |||
| 0003b420:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | |||
| 0003b430:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | |||
| 0003b440:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | |||
| 0003b450:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | |||
| 0003b460:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | |||
| 0003b470:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | |||
| 0003b480:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | |||
| 0003b490:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | |||
| 0003b4a0:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | |||
| 0003b4b0:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | |||
| 0003b4c0:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | |||
| 0003b4d0:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | |||
| 0003b4e0:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | |||
| 0003b4f0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b500:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | |||
| 0003b510:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | |||
| 0003b520:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | |||
| 0003b530:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | |||
| 0003b540:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | |||
| 0003b550:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | |||
| 0003b560:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | |||
| 0003b570:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | |||
| 0003b580:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | |||
| 0003b590:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | |||
| 0003b5a0:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | |||
| 0003b5b0:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | |||
| 0003b5c0:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | |||
| 0003b5d0:·2020·200a·2020·2020·7975·6d20·7265·696e·····.····yum·rein | |||
| 0003b5e0:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | |||
| 0003b5f0:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | |||
| 0003b600:·2020·2020·0a66·690a·3c2f·636f·6465·3e3c······.fi.</code>< | |||
| 0003b610:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b620:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b630:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b640:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b650:·612d·7461·7267·6574·3d22·2369·646d·3438··a-target="#idm48 | |||
| 0003b660:·3837·2220·7461·6269·6e64·6578·3d22·3022··87"·tabindex="0" | |||
| 0003b670:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b680:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b690:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b6a0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b6b0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b | 0003b6c0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b | 0003b6d0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b | 0003b6e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003b6f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003b700:·6170·7365·2220·6964·3d22·6964·6d34·3838··apse"·id="idm488 | ||
| 0003b | 0003b710:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | ||
| 0003b | 0003b720:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b | 0003b730:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b | 0003b740:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b | 0003b750:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b | 0003b760:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b | 0003b770:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003b | 0003b780:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b | 0003b790:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003b | 0003b7a0:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003b | 0003b7b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b | 0003b7c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b | 0003b7d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003b7e0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003b | 0003b7f0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003b | 0003b800:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b | 0003b810:·3e2d·206e·616d·653a·2027·5365·7420·6661··>-·name:·'Set·fa | ||
| 0003b | 0003b820:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003b | 0003b830:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003b | 0003b840:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | ||
| 0003b | 0003b850:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003b | 0003b860:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003b | 0003b870:·5f63·6d64·3a20·7975·6d20·7265·696e·7374··_cmd:·yum·reinst | ||
| 0003b | 0003b880:·616c·6c20·2d79·0a20·2077·6865·6e3a·2061··all·-y.··when:·a | ||
| 0003b | 0003b890:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | ||
| 0003b | 0003b8a0:·696f·6e20·696e·205b·2022·4665·646f·7261··ion·in·[·"Fedora | ||
| 0003b | 0003b8b0:·222c·2022·5265·6448·6174·222c·2022·4365··",·"RedHat",·"Ce | ||
| 0003b | 0003b8c0:·6e74·4f53·222c·2022·4f72·6163·6c65·4c69··ntOS",·"OracleLi | ||
| 0003b | 0003b8d0:·6e75·7822·205d·0a20·2074·6167·733a·0a20··nux"·].··tags:.· | ||
| 0003b | 0003b8e0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003b | 0003b8f0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003b | 0003b900:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003b | 0003b910:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003b | 0003b920:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003b | 0003b930:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003b | 0003b940:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003b | 0003b950:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003b | 0003b960:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003b | 0003b970:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003b | 0003b980:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b | 0003b990:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003b | 0003b9a0:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003b | 0003b9b0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003b | 0003b9c0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003b | 0003b9d0:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003b | 0003b9e0:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003b | 0003b9f0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003b | 0003ba00:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003b | 0003ba10:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003b | 0003ba20:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| Max diff block lines reached; 15519399/15545121 bytes (99.83%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·9 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·9 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:9 | 44 | ····*·cpe:/o:oracle:linux:9 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 14 lines modified | Offset 105, 27 lines modified | ||
| 105 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 105 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 106 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 106 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 111 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 114 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 115 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 116 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 117 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 118 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 119 | fi | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 117 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 125 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 118 | ··set_fact: | 126 | ··set_fact: |
| Offset 239, 27 lines modified | Offset 252, 14 lines modified | ||
| 239 | ··-·PCI-DSSv4-11.5.2 | 252 | ··-·PCI-DSSv4-11.5.2 |
| 240 | ··-·high_complexity | 253 | ··-·high_complexity |
| 241 | ··-·high_severity | 254 | ··-·high_severity |
| 242 | ··-·medium_disruption | 255 | ··-·medium_disruption |
| 243 | ··-·no_reboot_needed | 256 | ··-·no_reboot_needed |
| 244 | ··-·restrict_strategy | 257 | ··-·restrict_strategy |
| 245 | ··-·rpm_verify_hashes | 258 | ··-·rpm_verify_hashes |
| 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 247 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 248 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 249 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 250 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 251 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 252 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 253 | fi | ||
| 254 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 259 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 255 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 260 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 256 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 261 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 257 | run·the·following·command·to·determine·which·package·owns·it: | 262 | run·the·following·command·to·determine·which·package·owns·it: |
| 258 | $·rpm·-qf·FILENAME | 263 | $·rpm·-qf·FILENAME |
| 259 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 264 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 260 | $·sudo·rpm·--setugids·PACKAGENAME | 265 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 278, 14 lines modified | Offset 278, 40 lines modified | ||
| 278 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 278 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 279 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 279 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 280 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 280 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 281 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 281 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 283 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 283 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 284 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 284 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 285 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 286 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 287 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 288 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 289 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 290 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 291 | declare·-A·SETPERMS_RPM_DICT | ||
| 292 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 293 | #·is·expected·by·the·RPM·database | ||
| 294 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 295 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 296 | do | ||
| 297 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 298 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 299 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 300 | done | ||
| 301 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 302 | #·correct·values | ||
| 303 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 304 | do | ||
| 305 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 306 | done | ||
| 285 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 286 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 287 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 288 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 289 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 290 | -·name:·Read·list·of·files·with·incorrect·ownership | 312 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 291 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 313 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 360, 40 lines modified | Offset 386, 14 lines modified | ||
| 360 | ··-·PCI-DSSv4-11.5.2 | 386 | ··-·PCI-DSSv4-11.5.2 |
| 361 | ··-·high_complexity | 387 | ··-·high_complexity |
| 362 | ··-·high_severity | 388 | ··-·high_severity |
| 363 | ··-·medium_disruption | 389 | ··-·medium_disruption |
| 364 | ··-·no_reboot_needed | 390 | ··-·no_reboot_needed |
| 365 | ··-·restrict_strategy | 391 | ··-·restrict_strategy |
| 366 | ··-·rpm_verify_ownership | 392 | ··-·rpm_verify_ownership |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 372 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1503470/1511229 bytes (99.49%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d40:·2d31·3 | 00037d40:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15091, 301 lines modified | Offset 15091, 301 lines modified | ||
| 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af30:·2223·6964·6d34·3838·3622·2074·6162·696e··"#idm4886"·tabin | 0003af30:·2223·6964·6d34·3838·3622·2074·6162·696e··"#idm4886"·tabin | ||
| 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003af90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003afa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003afb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003afc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003afd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003afe0:·6d34·3838·3622·3e3c·7072·653e·3c63·6f64··m4886"><pre><cod | |||
| 0003aff0:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b000:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b010:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b020:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b030:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b040:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b050:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b060:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b070:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b080:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003b090:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003b0a0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003b0b0:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003b0c0:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003b0d0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b0e0:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003b0f0:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003b100:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003b110:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003b120:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003b130:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003b140:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003b150:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003b160:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003b170:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003b180:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003b190:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b1a0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003b1b0:·2027·2922·0a0a·2020·2020·0a20·2020·2079···')"..····.····y | |||
| 0003b1c0:·756d·2072·6569·6e73·7461·6c6c·202d·7920··um·reinstall·-y· | |||
| 0003b1d0:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003b1e0:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003b1f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b200:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b210:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b220:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b230:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b240:·2223·6964·6d34·3838·3722·2074·6162·696e··"#idm4887"·tabin | |||
| 0003b250:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b260:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b270:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b280:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b290:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003 | 0003b2a0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003 | 0003b2b0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003 | 0003b2c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003 | 0003b2d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003 | 0003b2e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003 | 0003b2f0:·2269·646d·3438·3837·223e·3c74·6162·6c65··"idm4887"><table | ||
| 0003 | 0003b300:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b310:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b320:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b330:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b340:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b350:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003b360:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b370:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b380:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003b390:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b3a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b3b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b3c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b3d0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003b3e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003b3f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003b400:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003b410:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003b420:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003b430:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003b440:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003b450:·696e·7374·616c·6c5f·636d·643a·2079·756d··install_cmd:·yum | ||
| 0003b | 0003b460:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003b470:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003b480:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003b490:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003b4a0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003b4b0:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003b4c0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b | 0003b4d0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003b4e0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003b4f0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003b500:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b | 0003b510:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b | 0003b520:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b | 0003b530:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b | 0003b540:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b | 0003b550:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003b560:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b | 0003b570:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b | 0003b580:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b | 0003b590:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b | 0003b5a0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b | 0003b5b0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b | 0003b5c0:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b | 0003b5d0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b | 0003b5e0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b | 0003b5f0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| Max diff block lines reached; 9369598/9395320 bytes (99.73%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·9 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·9 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:9 | 42 | ····*·cpe:/o:oracle:linux:9 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 93, 14 lines modified | Offset 93, 27 lines modified | ||
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 102 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 103 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 104 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 105 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 106 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 107 | fi | ||
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 105 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 113 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 106 | ··set_fact: | 114 | ··set_fact: |
| Offset 227, 27 lines modified | Offset 240, 14 lines modified | ||
| 227 | ··-·PCI-DSSv4-11.5.2 | 240 | ··-·PCI-DSSv4-11.5.2 |
| 228 | ··-·high_complexity | 241 | ··-·high_complexity |
| 229 | ··-·high_severity | 242 | ··-·high_severity |
| 230 | ··-·medium_disruption | 243 | ··-·medium_disruption |
| 231 | ··-·no_reboot_needed | 244 | ··-·no_reboot_needed |
| 232 | ··-·restrict_strategy | 245 | ··-·restrict_strategy |
| 233 | ··-·rpm_verify_hashes | 246 | ··-·rpm_verify_hashes |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 236 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 237 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 238 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 239 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 240 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 241 | fi | ||
| 242 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 247 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 243 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 248 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 244 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 249 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 245 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 250 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 246 | $·rpm·-qf·FILENAME | 251 | $·rpm·-qf·FILENAME |
| 247 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 252 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 268, 14 lines modified | Offset 268, 44 lines modified | ||
| 268 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 268 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 269 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 269 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 270 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 270 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 280 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 281 | declare·-A·SETPERMS_RPM_DICT | ||
| 282 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 283 | #·is·expected·by·the·RPM·database | ||
| 284 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 285 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 286 | do | ||
| 287 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 288 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 289 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 290 | ········do | ||
| 291 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 292 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 293 | ········done | ||
| 294 | done | ||
| 295 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 296 | #·correct·values | ||
| 297 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 298 | do | ||
| 299 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 300 | done | ||
| 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 280 | -·name:·Read·list·of·files·with·incorrect·permissions | 306 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 281 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 353, 44 lines modified | Offset 383, 14 lines modified | ||
| 353 | ··-·PCI-DSSv4-11.5.2 | 383 | ··-·PCI-DSSv4-11.5.2 |
| 354 | ··-·high_complexity | 384 | ··-·high_complexity |
| 355 | ··-·high_severity | 385 | ··-·high_severity |
| 356 | ··-·medium_disruption | 386 | ··-·medium_disruption |
| 357 | ··-·no_reboot_needed | 387 | ··-·no_reboot_needed |
| 358 | ··-·restrict_strategy | 388 | ··-·restrict_strategy |
| 359 | ··-·rpm_verify_permissions | 389 | ··-·rpm_verify_permissions |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 754680/762846 bytes (98.93%) of diff not shown. | |||
| Offset 14279, 16 lines modified | Offset 14279, 16 lines modified | ||
| 00037c60:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037c60:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037c70:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037c70:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037c80:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037c80:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037c90:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037c90:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ca0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ca0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037cb0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037cb0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037cc0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037cc0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037cd0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037cd0:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037ce0:·2d31·3 | 00037ce0:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037cf0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037cf0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d00:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d00:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d10:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d10:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d20:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d20:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d30:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d30:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d40:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d40:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037d50:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037d50:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15061, 200 lines modified | Offset 15061, 200 lines modified | ||
| 0003ad40:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | 0003ad40:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | ||
| 0003ad50:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003ad50:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003ad60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003ad60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003ad70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003ad70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003ad80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003ad80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003ad90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003ad90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003ada0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003ada0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003adb0:·7469·6f6e·20 | 0003adb0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | ||
| 0003adc0:· | 0003adc0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003add0:· | 0003add0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003ade0:· | 0003ade0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003adf0:· | 0003adf0:·7365·2220·6964·3d22·6964·6d35·3232·3222··se"·id="idm5222" | ||
| 0003ae00:·3 | 0003ae00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003ae10:· | 0003ae10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003ae20:·6 | 0003ae20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003ae30:· | 0003ae30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003ae40:· | 0003ae40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003ae50:· | 0003ae50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003ae60:· | 0003ae60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003ae70:· | 0003ae70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003ae80:· | 0003ae80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003ae90:· | 0003ae90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003aea0:·6 | 0003aea0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003aeb0:· | 0003aeb0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003aec0:· | 0003aec0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003aed0:· | 0003aed0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003aee0:· | 0003aee0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003aef0:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003a | 0003aef0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | ||
| 0003af00:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003af10:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003af20:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003af30:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003af40:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003af50:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003af60:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003af70:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003af80:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003af90:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003afa0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003afb0:·646d·3532·3233·2220·7461·6269·6e64·6578··dm5223"·tabindex | |||
| 0003afc0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003afd0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003afe0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003aff0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b000:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b010:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b020:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b030:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b040:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b050:·6c61·7073·6522·2069·643d·2269·646d·3532··lapse"·id="idm52 | |||
| 0003b060:·3233·223e·3c74·6162·6c65·2063·6c61·7373··23"><table·class | |||
| 0003b070:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b080:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b090:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b0a0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b0b0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b0c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b0d0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b0e0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b0f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b100:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b110:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b120:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b130:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b140:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b150:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0003b160:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b170:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b180:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b190:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0003b1a0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003b1b0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003b1c0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003b1d0:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003b1e0:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003b1f0:·6522·203b·2074·6865·6e0a·2020·2020·7975··e"·;·then.····yu | |||
| 0003b200:·6d20·696e·7374·616c·6c20·2d79·2022·6169··m·install·-y·"ai | |||
| 0003b210:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 0003b220:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003b230:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003b240:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003b250:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003b260:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0003b270:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b280:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b290:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b2a0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b2b0:·7461·7267·6574·3d22·2369·646d·3532·3234··target="#idm5224 | |||
| 0003b2c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b2d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b2e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b2f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b300:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b310:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b320:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b330:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b340:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b350:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b360:·7365·2220·6964·3d22·6964·6d35·3232·3422··se"·id="idm5224" | |||
| 0003b370:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b380:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b390:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b3a0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b3b0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b3c0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b3d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b3e0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b3f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b400:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| Max diff block lines reached; 30181355/30208871 bytes (99.91%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037e50:·313 | 00037e50:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15079, 200 lines modified | Offset 15079, 200 lines modified | ||
| 0003ae60:·6765·743d·2223·6964·6d35·3232·3222·2074··get="#idm5222"·t | 0003ae60:·6765·743d·2223·6964·6d35·3232·3222·2074··get="#idm5222"·t | ||
| 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003aed0:·20 | 0003aed0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | ||
| 0003aee0:· | 0003aee0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003aef0:· | 0003aef0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003af00:·6 | 0003af00:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003af10:· | 0003af10:·6964·3d22·6964·6d35·3232·3222·3e3c·7461··id="idm5222"><ta | ||
| 0003af20:· | 0003af20:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003af30:· | 0003af30:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003af40:· | 0003af40:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003af50:· | 0003af50:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003af60:· | 0003af60:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003af70:· | 0003af70:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003af80:· | 0003af80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003af90:· | 0003af90:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003afa0:· | 0003afa0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003afb0:· | 0003afb0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003afc0:· | 0003afc0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003afd0:· | 0003afd0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003afe0:· | 0003afe0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003aff0:· | 0003aff0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003b000:· | 0003b000:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b010:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003b0 | 0003b010:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | ||
| 0003b020:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b030:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b040:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b050:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b060:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b070:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b080:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b090:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b0a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b0b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b0c0:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | |||
| 0003b0d0:·3233·2220·7461·6269·6e64·6578·3d22·3022··23"·tabindex="0" | |||
| 0003b0e0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b0f0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b100:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b110:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b120:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b130:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b140:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b150:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b160:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b170:·6522·2069·643d·2269·646d·3532·3233·223e··e"·id="idm5223"> | |||
| 0003b180:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b190:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b1a0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b1b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b1c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b1d0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b1e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b1f0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b200:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b210:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b220:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b230:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b240:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b250:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b260:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b270:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003b280:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b290:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b2a0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b2b0:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b2c0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b2d0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b2e0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b2f0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003b300:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003b310:·2074·6865·6e0a·2020·2020·7975·6d20·696e···then.····yum·in | |||
| 0003b320:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b330:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003b340:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b350:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b360:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b370:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b380:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b390:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b3a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b3b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b3c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b3d0:·6574·3d22·2369·646d·3532·3234·2220·7461··et="#idm5224"·ta | |||
| 0003b3e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b3f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b400:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b410:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b420:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b430:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b440:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b450:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b460:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b470:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b480:·6964·3d22·6964·6d35·3232·3422·3e3c·7461··id="idm5224"><ta | |||
| 0003b490:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b4a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b4b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b4c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b4d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b4e0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b4f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b500:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b510:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b520:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| Max diff block lines reached; 30133312/30160828 bytes (99.91%) of diff not shown. | |||
| Offset 14324, 15 lines modified | Offset 14324, 15 lines modified | ||
| 00037f30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037f30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037f40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037f40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037f50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037f50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037f60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037f60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037f70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037f70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037f80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037f80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037f90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037f90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037fa0:·206f·6620·3230·323 | 00037fa0:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037fb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037fb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fc0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037fc0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037fd0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037fd0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037fe0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037fe0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037ff0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037ff0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038000:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038000:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038010:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038010:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16154, 174 lines modified | Offset 16154, 174 lines modified | ||
| 0003f190:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003f190:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003f1a0:·2223·6964·6d31·3232·3922·2074·6162·696e··"#idm1229"·tabin | 0003f1a0:·2223·6964·6d31·3232·3922·2074·6162·696e··"#idm1229"·tabin | ||
| 0003f1b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003f1b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003f1c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003f1c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003f1d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003f1d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003f1e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003f1e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003f1f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003f1f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003f200:·3e52·656d·6564·6961·7469·6f6e·20 | 0003f200:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003f210:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003f220:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003f230:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003f240:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003f250:·6d31·3232·3922·3e3c·7072·653e·3c63·6f64··m1229"><pre><cod | |||
| 0003f260:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003f270:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003f280:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003f290:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003f2a0:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003f2b0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | |||
| 0003f210:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003f220:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003f230:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003f240:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003f250:·2269·646d·3132·3239·223e·3c74·6162·6c65··"idm1229"><table | |||
| 0003f260:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003f270:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003f280:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003f290:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003f2a0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003f2b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003f2c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003f2d0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003f2e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003f2f0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003f300:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003f310:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003f320:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003f330:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003f340:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003f350:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | |||
| 0003f | 0003f2c0:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | ||
| 0003f | 0003f2d0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003f2e0:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003f2f0:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003f300:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003f310:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003f380:·2023·2070·726f·6d6f·7465·2074·6f20·7661···#·promote·to·va | |||
| 0003f390:·7269·6162·6c65·0a20·2073·6574·5f66·6163··riable.··set_fac | |||
| 0003f3a0:·743a·0a20·2020·2076·6172·5f73·7973·7465··t:.····var_syste | |||
| 0003f3b0:·6d5f·6372·7970·746f·5f70·6f6c·6963·793a··m_crypto_policy: | |||
| 0003f3c0:·2021·2173·7472·203c·6162·6272·2074·6974···!!str·<abbr·tit | |||
| 0003f3d0:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003f3e0:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003f3f0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003f400:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003f410:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003f420:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003f430:·554c·543c·2f61·6262·723e·0a20·2074·6167··ULT</abbr>.··tag | |||
| 0003f440:·733a·0a20·2020·202d·2061·6c77·6179·730a··s:.····-·always. | |||
| 0003f450:·0a2d·206e·616d·653a·2043·6f6e·6669·6775··.-·name:·Configu | |||
| 0003f460:·7265·2053·7973·7465·6d20·4372·7970·746f··re·System·Crypto | |||
| 0003f470:·6772·6170·6879·2050·6f6c·6963·790a·2020··graphy·Policy.·· | |||
| 0003f480:·6c69·6e65·696e·6669·6c65·3a0a·2020·2020··lineinfile:.···· | |||
| 0003f490:·7061·7468·3a20·2f65·7463·2f63·7279·7074··path:·/etc/crypt | |||
| 0003f4a0:·6f2d·706f·6c69·6369·6573·2f63·6f6e·6669··o-policies/confi | |||
| 0003f4b0:·670a·2020·2020·7265·6765·7870·3a20·5e28··g.····regexp:·^( | |||
| 0003f4c0:·3f21·2329·285c·532b·2924·0a20·2020·206c··?!#)(\S+)$.····l | |||
| 0003f4d0:·696e·653a·2027·7b7b·2076·6172·5f73·7973··ine:·'{{·var_sys | |||
| 0003f4e0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003f4f0:·7920·7d7d·270a·2020·2020·6372·6561·7465··y·}}'.····create | |||
| 0003f500:·3a20·7472·7565·0a20·2074·6167·733a·0a20··:·true.··tags:.· | |||
| 0003f510:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | |||
| 0003f520:·432d·3137·2832·290a·2020·2d20·4e49·5354··C-17(2).··-·NIST | |||
| 0003f530:·2d38·3030·2d35·332d·4143·2d31·3728·6129··-800-53-AC-17(a) | |||
| 0003f540:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003f550:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 0003f560:·542d·3830·302d·3533·2d4d·412d·3428·3629··T-800-53-MA-4(6) | |||
| 0003f570:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003f580:·2d53·432d·3132·2832·290a·2020·2d20·4e49··-SC-12(2).··-·NI | |||
| 0003f590:·5354·2d38·3030·2d35·332d·5343·2d31·3228··ST-800-53-SC-12( | |||
| 0003f5a0:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | |||
| 0003f5b0:·3533·2d53·432d·3133·0a20·202d·2050·4349··53-SC-13.··-·PCI | |||
| 0003f5c0:·2d44·5353·7634·2d32·2e32·2e37·0a20·202d··-DSSv4-2.2.7.··- | |||
| 0003f5d0:·2063·6f6e·6669·6775·7265·5f63·7279·7074···configure_crypt | |||
| 0003f5e0:·6f5f·706f·6c69·6379·0a20·202d·2068·6967··o_policy.··-·hig | |||
| 0003f5f0:·685f·7365·7665·7269·7479·0a20·202d·206c··h_severity.··-·l | |||
| 0003f600:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003f610:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003f620:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003f630:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | |||
| 0003f640:·6374·5f73·7472·6174·6567·790a·0a2d·206e··ct_strategy..-·n | |||
| 0003f650:·616d·653a·2056·6572·6966·7920·7468·6174··ame:·Verify·that | |||
| 0003f660:·2043·7279·7074·6f20·506f·6c69·6379·2069···Crypto·Policy·i | |||
| 0003f670:·7320·5365·7420·2872·756e·7469·6d65·290a··s·Set·(runtime). | |||
| 0003f680:·2020·636f·6d6d·616e·643a·202f·7573·722f····command:·/usr/ | |||
| 0003f690:·6269·6e2f·7570·6461·7465·2d63·7279·7074··bin/update-crypt | |||
| 0003f6a0:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 0003f | 0003f320:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | ||
| 0003f | 0003f330:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | ||
| 0003f6d0:·2020·7461·6773·3a0a·2020·2d20·4e49·5354····tags:.··-·NIST | |||
| 0003f6e0:·2d38·3030·2d35·332d·4143·2d31·3728·3229··-800-53-AC-17(2) | |||
| 0003f6f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003f700:·2d41·432d·3137·2861·290a·2020·2d20·4e49··-AC-17(a).··-·NI | |||
| 0003f710:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003f720:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003f730:·332d·4d41·2d34·2836·290a·2020·2d20·4e49··3-MA-4(6).··-·NI | |||
| 0003f740:·5354·2d38·3030·2d35·332d·5343·2d31·3228··ST-800-53-SC-12( | |||
| 0003f750:·3229·0a20·202d·204e·4953·542d·3830·302d··2).··-·NIST-800- | |||
| 0003f760:·3533·2d53·432d·3132·2833·290a·2020·2d20··53-SC-12(3).··-· | |||
| 0003f770:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003f780:·330a·2020·2d20·5043·492d·4453·5376·342d··3.··-·PCI-DSSv4- | |||
| Max diff block lines reached; 1920584/1944374 bytes (98.78%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:openembedded:harden: | 44 | ····*·cpe:/o:openembedded:harden: |
| 45 | ····*·cpe:/o:openembedded:nodistro: | 45 | ····*·cpe:/o:openembedded:nodistro: |
| 46 | ····*·cpe:/o:openembedded:petalinux: | 46 | ····*·cpe:/o:openembedded:petalinux: |
| 47 | ····*·cpe:/o:openembedded:poky: | 47 | ····*·cpe:/o:openembedded:poky: |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 359, 14 lines modified | Offset 359, 33 lines modified | ||
| 359 | ············_\x8i_\x8s_\x8m······1446 | 359 | ············_\x8i_\x8s_\x8m······1446 |
| 360 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 360 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 361 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 361 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 362 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 362 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 363 | ·····················FCS_TLSC_EXT.1 | 363 | ·····················FCS_TLSC_EXT.1 |
| 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 365 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 365 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 367 | var_system_crypto_policy='DEFAULT' | ||
| 368 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 369 | rc=$? | ||
| 370 | if·test·"$rc"·=·127;·then | ||
| 371 | » echo·"$stderr_of_call"·>&2 | ||
| 372 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 373 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 374 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 375 | » false··#·end·with·an·error·code | ||
| 376 | elif·test·"$rc"·!=·0;·then | ||
| 377 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 378 | » false··#·end·with·an·error·code | ||
| 379 | fi | ||
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 371 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 385 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 372 | ··set_fact: | 386 | ··set_fact: |
| Offset 409, 33 lines modified | Offset 428, 14 lines modified | ||
| 409 | ··-·PCI-DSSv4-2.2.7 | 428 | ··-·PCI-DSSv4-2.2.7 |
| 410 | ··-·configure_crypto_policy | 429 | ··-·configure_crypto_policy |
| 411 | ··-·high_severity | 430 | ··-·high_severity |
| 412 | ··-·low_complexity | 431 | ··-·low_complexity |
| 413 | ··-·low_disruption | 432 | ··-·low_disruption |
| 414 | ··-·no_reboot_needed | 433 | ··-·no_reboot_needed |
| 415 | ··-·restrict_strategy | 434 | ··-·restrict_strategy |
| 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 417 | var_system_crypto_policy='DEFAULT' | ||
| 418 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 419 | rc=$? | ||
| 420 | if·test·"$rc"·=·127;·then | ||
| 421 | » echo·"$stderr_of_call"·>&2 | ||
| 422 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 423 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 424 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 425 | » false··#·end·with·an·error·code | ||
| 426 | elif·test·"$rc"·!=·0;·then | ||
| 427 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 428 | » false··#·end·with·an·error·code | ||
| 429 | fi | ||
| 430 | Group ·Updating·Software· Group·contains·1·rule | 435 | Group ·Updating·Software· Group·contains·1·rule |
| 431 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·dnf·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 436 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·dnf·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 432 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 437 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| 433 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 438 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 434 | OpenEmbedded·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records | 439 | OpenEmbedded·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records |
| 435 | metadata·of·installed·packages.·Consistently·using·dnf·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all | 440 | metadata·of·installed·packages.·Consistently·using·dnf·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all |
| Offset 640, 14 lines modified | Offset 640, 20 lines modified | ||
| 640 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 640 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 641 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 641 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 642 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 642 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 643 | ···········standards,·and·guidance. | 643 | ···········standards,·and·guidance. |
| 644 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 644 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 645 | Severity: ·medium | 645 | Severity: ·medium |
| 646 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue | 646 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue |
| 647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 652 | chgrp·-L·0·/etc/issue | ||
| 647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 653 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 654 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 655 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 656 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 657 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 652 | -·name:·Test·for·existence·/etc/issue | 658 | -·name:·Test·for·existence·/etc/issue |
| 653 | ··stat: | 659 | ··stat: |
| Offset 669, 30 lines modified | Offset 675, 30 lines modified | ||
| 669 | ··tags: | 675 | ··tags: |
| 670 | ··-·configure_strategy | 676 | ··-·configure_strategy |
| 671 | ··-·file_groupowner_etc_issue | 677 | ··-·file_groupowner_etc_issue |
| 672 | ··-·low_complexity | 678 | ··-·low_complexity |
| 673 | ··-·low_disruption | 679 | ··-·low_disruption |
| 674 | ··-·medium_severity | 680 | ··-·medium_severity |
| 675 | ··-·no_reboot_needed | 681 | ··-·no_reboot_needed |
| 676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 681 | chgrp·-L·0·/etc/issue | ||
| 682 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 682 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 683 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: | 683 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: |
| 684 | $·sudo·chgrp·root·/etc/motd | 684 | $·sudo·chgrp·root·/etc/motd |
| 685 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 685 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 686 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 686 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 687 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 687 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 688 | ···········standards,·and·guidance. | 688 | ···········standards,·and·guidance. |
| 689 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 689 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 690 | Severity: ·medium | 690 | Severity: ·medium |
| Max diff block lines reached; 245703/251999 bytes (97.50%) of diff not shown. | |||
| Offset 14319, 15 lines modified | Offset 14319, 15 lines modified | ||
| 00037ee0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037ee0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037ef0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037ef0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037f00:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037f00:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037f10:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037f10:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037f20:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037f20:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037f30:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037f30:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037f40:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037f40:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037f50:·206f·6620·3230·323 | 00037f50:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037f60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f70:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f70:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f80:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f80:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f90:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f90:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037fa0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037fa0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037fb0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037fb0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037fc0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037fc0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 17046, 102 lines modified | Offset 17046, 102 lines modified | ||
| 00042950:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00042950:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00042960:·3d22·2369·646d·3233·3436·2220·7461·6269··="#idm2346"·tabi | 00042960:·3d22·2369·646d·3233·3436·2220·7461·6269··="#idm2346"·tabi | ||
| 00042970:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00042970:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00042980:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00042980:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00042990:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00042990:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 000429a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 000429a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 000429b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 000429b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 000429c0:·223e·5265·6d65·6469·6174·696f·6e20· | 000429c0:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 000429d0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 000429e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000429 | 000429d0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 000429e0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 000429f0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00042a00:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00042a10:·646d·3233·3436·223e·3c74·6162·6c65·2063··dm2346"><table·c | |||
| 00042a20:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00042a30:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00042a40:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00042a50:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00042a60:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00042a70:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00042a80:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00042a90:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00042aa0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00042ab0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00042ac0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00042ad0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00042ae0:·6567·793a·3c2f·7468·3e3c·7464·3e63·6f6e··egy:</th><td>con | |||
| 00042af0:·6669·6775·7265·3c2f·7464·3e3c·2f74·723e··figure</td></tr> | |||
| 00042b00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00042b10:·6465·3e63·6867·7270·202d·4c20·3020·2f65··de>chgrp·-L·0·/e | |||
| 00042b20:·7463·2f69·7373·7565·0a3c·2f63·6f64·653e··tc/issue.</code> | |||
| 00042b30:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00042b40:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00042b50:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00042 | 00042b60:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 00042a10:·3d22·6964·6d32·3334·3622·3e3c·7461·626c··="idm2346"><tabl | |||
| 00042a20:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00042a30:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00042a40:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00042a50:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00042a60:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00042a70:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00042a80:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00042 | 00042b70:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | ||
| 00042b80:·3334·3722·2074·6162·696e·6465·783d·2230··347"·tabindex="0 | |||
| 00042b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00042ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00042bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00042bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00042bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00042be0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 00042bf0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00042c00:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00042c10:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00042c20:·6c61·7073·6522·2069·643d·2269·646d·3233··lapse"·id="idm23 | |||
| 00042c30:·3437·223e·3c74·6162·6c65·2063·6c61·7373··47"><table·class | |||
| 00042c40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00042c50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00042c60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00042c70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00042c80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00042 | 00042c90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 00042ab0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00042 | 00042ca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 00042cb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00042 | 00042cc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00042 | 00042cd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 00042af0:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | |||
| 00042b00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00042b10:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5465··<code>-·name:·Te | |||
| 00042b20:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | |||
| 00042b30:·202f·6574·632f·6973·7375·650a·2020·7374···/etc/issue.··st | |||
| 00042b40:·6174·3a0a·2020·2020·7061·7468·3a20·2f65··at:.····path:·/e | |||
| 00042b50:·7463·2f69·7373·7565·0a20·2072·6567·6973··tc/issue.··regis | |||
| 00042b60:·7465·723a·2066·696c·655f·6578·6973·7473··ter:·file_exists | |||
| 00042b70:·0a20·2074·6167·733a·0a20·202d·2063·6f6e··.··tags:.··-·con | |||
| 00042b80:·6669·6775·7265·5f73·7472·6174·6567·790a··figure_strategy. | |||
| 00042b90:·2020·2d20·6669·6c65·5f67·726f·7570·6f77····-·file_groupow | |||
| 00042ba0:·6e65·725f·6574·635f·6973·7375·650a·2020··ner_etc_issue.·· | |||
| 00042bb0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 00042bc0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 00042bd0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 00042be0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 00042bf0:·6562·6f6f·745f·6e65·6564·6564·0a0a·2d20··eboot_needed..-· | |||
| 00042c00:·6e61·6d65·3a20·456e·7375·7265·2067·726f··name:·Ensure·gro | |||
| 00042c10:·7570·206f·776e·6572·2030·206f·6e20·2f65··up·owner·0·on·/e | |||
| 00042c20:·7463·2f69·7373·7565·0a20·2066·696c·653a··tc/issue.··file: | |||
| 00042c30:·0a20·2020·2070·6174·683a·202f·6574·632f··.····path:·/etc/ | |||
| 00042c40:·6973·7375·650a·2020·2020·6772·6f75·703a··issue.····group: | |||
| 00042c50:·2027·3027·0a20·2077·6865·6e3a·2066·696c···'0'.··when:·fil | |||
| 00042c60:·655f·6578·6973·7473·2e73·7461·7420·6973··e_exists.stat·is | |||
| 00042c70:·2064·6566·696e·6564·2061·6e64·2066·696c···defined·and·fil | |||
| 00042c80:·655f·6578·6973·7473·2e73·7461·742e·6578··e_exists.stat.ex | |||
| 00042c90:·6973·7473·0a20·2074·6167·733a·0a20·202d··ists.··tags:.··- | |||
| 00042ca0:·2063·6f6e·6669·6775·7265·5f73·7472·6174···configure_strat | |||
| 00042cb0:·6567·790a·2020·2d20·6669·6c65·5f67·726f··egy.··-·file_gro | |||
| 00042cc0:·7570·6f77·6e65·725f·6574·635f·6973·7375··upowner_etc_issu | |||
| 00042cd0:·650a·2020·2d20·6c6f·775f·636f·6d70·6c65··e.··-·low_comple | |||
| 00042ce0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 00042cf0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 00042d00:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 00042d10:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 00042d20:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00042d30:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00042d40:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00042d50:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00042d60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00042d70:·743d·2223·6964·6d32·3334·3722·2074·6162··t="#idm2347"·tab | |||
| 00042d80:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00042d90:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| Max diff block lines reached; 1872918/1886772 bytes (99.27%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:openembedded:harden: | 42 | ····*·cpe:/o:openembedded:harden: |
| 43 | ····*·cpe:/o:openembedded:nodistro: | 43 | ····*·cpe:/o:openembedded:nodistro: |
| 44 | ····*·cpe:/o:openembedded:petalinux: | 44 | ····*·cpe:/o:openembedded:petalinux: |
| 45 | ····*·cpe:/o:openembedded:poky: | 45 | ····*·cpe:/o:openembedded:poky: |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 517, 14 lines modified | Offset 517, 20 lines modified | ||
| 517 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 517 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 518 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 518 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 519 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 519 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 520 | ···········standards,·and·guidance. | 520 | ···········standards,·and·guidance. |
| 521 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 521 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 522 | Severity: ·medium | 522 | Severity: ·medium |
| 523 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue | 523 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue |
| 524 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 525 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 526 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 527 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 528 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 529 | chgrp·-L·0·/etc/issue | ||
| 524 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 525 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 531 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 526 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 532 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 527 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 533 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 528 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 534 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 529 | -·name:·Test·for·existence·/etc/issue | 535 | -·name:·Test·for·existence·/etc/issue |
| 530 | ··stat: | 536 | ··stat: |
| Offset 546, 30 lines modified | Offset 552, 30 lines modified | ||
| 546 | ··tags: | 552 | ··tags: |
| 547 | ··-·configure_strategy | 553 | ··-·configure_strategy |
| 548 | ··-·file_groupowner_etc_issue | 554 | ··-·file_groupowner_etc_issue |
| 549 | ··-·low_complexity | 555 | ··-·low_complexity |
| 550 | ··-·low_disruption | 556 | ··-·low_disruption |
| 551 | ··-·medium_severity | 557 | ··-·medium_severity |
| 552 | ··-·no_reboot_needed | 558 | ··-·no_reboot_needed |
| 553 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 554 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 555 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 556 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 557 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 558 | chgrp·-L·0·/etc/issue | ||
| 559 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 559 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 560 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: | 560 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: |
| 561 | $·sudo·chgrp·root·/etc/motd | 561 | $·sudo·chgrp·root·/etc/motd |
| 562 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 562 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 563 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 563 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 564 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 564 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 565 | ···········standards,·and·guidance. | 565 | ···········standards,·and·guidance. |
| 566 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 566 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 567 | Severity: ·medium | 567 | Severity: ·medium |
| 568 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd | 568 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd |
| 569 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 570 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 571 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 572 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 573 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 574 | chgrp·-L·0·/etc/motd | ||
| 569 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 570 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 571 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 572 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 573 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 574 | -·name:·Test·for·existence·/etc/motd | 580 | -·name:·Test·for·existence·/etc/motd |
| 575 | ··stat: | 581 | ··stat: |
| Offset 591, 30 lines modified | Offset 597, 30 lines modified | ||
| 591 | ··tags: | 597 | ··tags: |
| 592 | ··-·configure_strategy | 598 | ··-·configure_strategy |
| 593 | ··-·file_groupowner_etc_motd | 599 | ··-·file_groupowner_etc_motd |
| 594 | ··-·low_complexity | 600 | ··-·low_complexity |
| 595 | ··-·low_disruption | 601 | ··-·low_disruption |
| 596 | ··-·medium_severity | 602 | ··-·medium_severity |
| 597 | ··-·no_reboot_needed | 603 | ··-·no_reboot_needed |
| 598 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 599 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 600 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 601 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 602 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 603 | chgrp·-L·0·/etc/motd | ||
| 604 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·o\x8ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·L\x8Lo\x8og\x8gi\x8in\x8n·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 604 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·o\x8ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·L\x8Lo\x8og\x8gi\x8in\x8n·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 605 | To·properly·set·the·owner·of·/etc/issue,·run·the·command: | 605 | To·properly·set·the·owner·of·/etc/issue,·run·the·command: |
| 606 | $·sudo·chown·root·/etc/issue | 606 | $·sudo·chown·root·/etc/issue |
| 607 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 607 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 608 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 608 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 609 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 609 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 610 | ···········standards,·and·guidance. | 610 | ···········standards,·and·guidance. |
| 611 | ···········Proper·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 611 | ···········Proper·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 612 | Severity: ·medium | 612 | Severity: ·medium |
| 613 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_owner_etc_issue | 613 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_owner_etc_issue |
| 614 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 615 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 616 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 617 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 618 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 619 | chown·-L·0·/etc/issue | ||
| 614 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 620 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 615 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 621 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 616 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 622 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 617 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 623 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 618 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 624 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 619 | -·name:·Test·for·existence·/etc/issue | 625 | -·name:·Test·for·existence·/etc/issue |
| 620 | ··stat: | 626 | ··stat: |
| Offset 636, 30 lines modified | Offset 642, 30 lines modified | ||
| 636 | ··tags: | 642 | ··tags: |
| 637 | ··-·configure_strategy | 643 | ··-·configure_strategy |
| 638 | ··-·file_owner_etc_issue | 644 | ··-·file_owner_etc_issue |
| 639 | ··-·low_complexity | 645 | ··-·low_complexity |
| 640 | ··-·low_disruption | 646 | ··-·low_disruption |
| 641 | ··-·medium_severity | 647 | ··-·medium_severity |
| 642 | ··-·no_reboot_needed | 648 | ··-·no_reboot_needed |
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 644 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 645 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 646 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 647 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 648 | chown·-L·0·/etc/issue | ||
| 649 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·o\x8ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 649 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·o\x8ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 650 | To·properly·set·the·owner·of·/etc/motd,·run·the·command: | 650 | To·properly·set·the·owner·of·/etc/motd,·run·the·command: |
| 651 | $·sudo·chown·root·/etc/motd | 651 | $·sudo·chown·root·/etc/motd |
| Max diff block lines reached; 238587/245026 bytes (97.37%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037ec0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037ed0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037ed0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037ee0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037ee0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ef0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ef0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f00:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f00:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f10:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f10:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2028·6173·206f·6620·3230·323 | 00037f30:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00037f40:·3 | 00037f40:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 00037f50:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f50:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f60:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f60:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f70:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f70:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f80:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f80:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f90:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f90:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037fa0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037fa0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037fb0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037fb0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 16095, 173 lines modified | Offset 16095, 173 lines modified | ||
| 0003ede0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003ede0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003edf0:·2369·646d·3132·3737·2220·7461·6269·6e64··#idm1277"·tabind | 0003edf0:·2369·646d·3132·3737·2220·7461·6269·6e64··#idm1277"·tabind | ||
| 0003ee00:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003ee00:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003ee10:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003ee10:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003ee20:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003ee20:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003ee30:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003ee30:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003ee40:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003ee40:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003ee50:·5265·6d65·6469·6174·696f·6e20· | 0003ee50:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003ee60:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003ee70:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ee80:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ee90:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003eea0:·3132·3737·223e·3c70·7265·3e3c·636f·6465··1277"><pre><code | |||
| 0003eeb0:·3e0a·7661·725f·7379·7374·656d·5f63·7279··>.var_system_cry | |||
| 0003eec0:·7074·6f5f·706f·6c69·6379·3d27·3c61·6262··pto_policy='<abb | |||
| 0003eed0:·7220·7469·746c·653d·2266·726f·6d20·4265··r·title="from·Be | |||
| 0003eee0:·6e63·686d·6172·6b2f·5661·6c75·653a·2078··nchmark/Value:·x | |||
| 0003eef0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003ef00:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003ef10:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003ef20:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003ef30:·554c·543c·2f61·6262·723e·270a·0a0a·7374··ULT</abbr>'...st | |||
| 0003ef40:·6465·7272·5f6f·665f·6361·6c6c·3d24·2875··derr_of_call=$(u | |||
| 0003ef50:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 0003ee60:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003ee70:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ee80:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ee90:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003eea0:·6964·6d31·3237·3722·3e3c·7461·626c·6520··idm1277"><table· | |||
| 0003eeb0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003eec0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003eed0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003eee0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003eef0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ef00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ef10:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003ef20:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003ef30:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ef40:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ef50:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003ef60:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ef70:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003ef80:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003ef90:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003efa0:·6465·3e2d·206e·616d·653a·2058·4343·4446··de>-·name:·XCCDF | |||
| 0003efb0:·2056·616c·7565·2076·6172·5f73·7973·7465···Value·var_syste | |||
| 0003efc0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7920··m_crypto_policy· | |||
| 0003efd0:·2320·7072·6f6d·6f74·6520·746f·2076·6172··#·promote·to·var | |||
| 0003efe0:·6961·626c·650a·2020·7365·745f·6661·6374··iable.··set_fact | |||
| 0003eff0:·3a0a·2020·2020·7661·725f·7379·7374·656d··:.····var_system | |||
| 0003f000:·5f63·7279·7074·6f5f·706f·6c69·6379·3a20··_crypto_policy:· | |||
| 0003f010:·2121·7374·7220·3c61·6262·7220·7469·746c··!!str·<abbr·titl | |||
| 0003f020:·653d·2266·726f·6d20·4265·6e63·686d·6172··e="from·Benchmar | |||
| 0003f030:·6b2f·5661·6c75·653a·2078·6363·6466·5f6f··k/Value:·xccdf_o | |||
| 0003f040:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | |||
| 0003f050:·6e74·656e·745f·7661·6c75·655f·7661·725f··ntent_value_var_ | |||
| 0003f060:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003f070:·6c69·6379·223e·4445·4641·554c·543c·2f61··licy">DEFAULT</a | |||
| 0003f080:·6262·723e·0a20·2074·6167·733a·0a20·2020··bbr>.··tags:.··· | |||
| 0003f090:·202d·2061·6c77·6179·730a·0a2d·206e·616d···-·always..-·nam | |||
| 0003f0a0:·653a·2043·6f6e·6669·6775·7265·2053·7973··e:·Configure·Sys | |||
| 0003f0b0:·7465·6d20·4372·7970·746f·6772·6170·6879··tem·Cryptography | |||
| 0003f0c0:·2050·6f6c·6963·790a·2020·6c69·6e65·696e···Policy.··linein | |||
| 0003f0d0:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | |||
| 0003f0e0:·2f65·7463·2f63·7279·7074·6f2d·706f·6c69··/etc/crypto-poli | |||
| 0003f0f0:·6369·6573·2f63·6f6e·6669·670a·2020·2020··cies/config.···· | |||
| 0003f100:·7265·6765·7870·3a20·5e28·3f21·2329·285c··regexp:·^(?!#)(\ | |||
| 0003f110:·532b·2924·0a20·2020·206c·696e·653a·2027··S+)$.····line:·' | |||
| 0003f120:·7b7b·2076·6172·5f73·7973·7465·6d5f·6372··{{·var_system_cr | |||
| 0003f130:·7970·746f·5f70·6f6c·6963·7920·7d7d·270a··ypto_policy·}}'. | |||
| 0003f140:·2020·2020·6372·6561·7465·3a20·7472·7565······create:·true | |||
| 0003f150:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 0003f160:·542d·3830·302d·3533·2d41·432d·3137·2832··T-800-53-AC-17(2 | |||
| 0003f170:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003f180:·332d·4143·2d31·3728·6129·0a20·202d·204e··3-AC-17(a).··-·N | |||
| 0003f190:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003f1a0:·6129·0a20·202d·204e·4953·542d·3830·302d··a).··-·NIST-800- | |||
| 0003f1b0:·3533·2d4d·412d·3428·3629·0a20·202d·204e··53-MA-4(6).··-·N | |||
| 0003f1c0:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003f1d0:·2832·290a·2020·2d20·4e49·5354·2d38·3030··(2).··-·NIST-800 | |||
| 0003f1e0:·2d35·332d·5343·2d31·3228·3329·0a20·202d··-53-SC-12(3).··- | |||
| 0003f1f0:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003f200:·3133·0a20·202d·2050·4349·2d44·5353·7634··13.··-·PCI-DSSv4 | |||
| 0003f210:·2d32·2e32·2e37·0a20·202d·2063·6f6e·6669··-2.2.7.··-·confi | |||
| 0003f220:·6775·7265·5f63·7279·7074·6f5f·706f·6c69··gure_crypto_poli | |||
| 0003f230:·6379·0a20·202d·2068·6967·685f·7365·7665··cy.··-·high_seve | |||
| 0003f240:·7269·7479·0a20·202d·206c·6f77·5f63·6f6d··rity.··-·low_com | |||
| 0003f250:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003f260:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | |||
| 0003f270:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003f280:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | |||
| 0003f290:·6174·6567·790a·0a2d·206e·616d·653a·2056··ategy..-·name:·V | |||
| 0003f2a0:·6572·6966·7920·7468·6174·2043·7279·7074··erify·that·Crypt | |||
| 0003f2b0:·6f20·506f·6c69·6379·2069·7320·5365·7420··o·Policy·is·Set· | |||
| 0003f2c0:·2872·756e·7469·6d65·290a·2020·636f·6d6d··(runtime).··comm | |||
| 0003f2d0:·616e·643a·202f·7573·722f·6269·6e2f·7570··and:·/usr/bin/up | |||
| 0003f2e0:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 0003 | 0003ef60:·6963·6965·7320·2d2d·7365·7420·247b·7661··icies·--set·${va | ||
| 0003 | 0003ef70:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | ||
| 0003ef80:·706f·6c69·6379·7d20·3226·6774·3b26·616d··policy}·2>&am | |||
| 0003ef90:·703b·3120·2667·743b·202f·6465·762f·6e75··p;1·>·/dev/nu | |||
| 0003efa0:·6c6c·290a·7263·3d24·3f0a·0a69·6620·7465··ll).rc=$?..if·te | |||
| 0003efb0:·7374·2022·2472·6322·203d·2031·3237·3b20··st·"$rc"·=·127;· | |||
| 0003f310:·706f·6c69·6379·207d·7d0a·2020·7461·6773··policy·}}.··tags | |||
| 0003f320:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003f330:·332d·4143·2d31·3728·3229·0a20·202d·204e··3-AC-17(2).··-·N | |||
| 0003f340:·4953·542d·3830·302d·3533·2d41·432d·3137··IST-800-53-AC-17 | |||
| 0003f350:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 0003f360:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003f370:·4e49·5354·2d38·3030·2d35·332d·4d41·2d34··NIST-800-53-MA-4 | |||
| Max diff block lines reached; 3332476/3356266 bytes (99.29%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server | 42 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server |
| 43 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server | 43 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server |
| 44 | ····*·cpe:/o:openEuler:openEuler:22.03LTS:ga:server | 44 | ····*·cpe:/o:openEuler:openEuler:22.03LTS:ga:server |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 320, 14 lines modified | Offset 320, 33 lines modified | ||
| 320 | ············_\x8i_\x8s_\x8m······1446 | 320 | ············_\x8i_\x8s_\x8m······1446 |
| 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 322 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 322 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 323 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 323 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 324 | ·····················FCS_TLSC_EXT.1 | 324 | ·····················FCS_TLSC_EXT.1 |
| 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 328 | var_system_crypto_policy='DEFAULT' | ||
| 329 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 330 | rc=$? | ||
| 331 | if·test·"$rc"·=·127;·then | ||
| 332 | » echo·"$stderr_of_call"·>&2 | ||
| 333 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 334 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 335 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 336 | » false··#·end·with·an·error·code | ||
| 337 | elif·test·"$rc"·!=·0;·then | ||
| 338 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 339 | » false··#·end·with·an·error·code | ||
| 340 | fi | ||
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 341 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 342 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 343 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 344 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 345 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 332 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 346 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 333 | ··set_fact: | 347 | ··set_fact: |
| Offset 370, 33 lines modified | Offset 389, 14 lines modified | ||
| 370 | ··-·PCI-DSSv4-2.2.7 | 389 | ··-·PCI-DSSv4-2.2.7 |
| 371 | ··-·configure_crypto_policy | 390 | ··-·configure_crypto_policy |
| 372 | ··-·high_severity | 391 | ··-·high_severity |
| 373 | ··-·low_complexity | 392 | ··-·low_complexity |
| 374 | ··-·low_disruption | 393 | ··-·low_disruption |
| 375 | ··-·no_reboot_needed | 394 | ··-·no_reboot_needed |
| 376 | ··-·restrict_strategy | 395 | ··-·restrict_strategy |
| 377 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 378 | var_system_crypto_policy='DEFAULT' | ||
| 379 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 380 | rc=$? | ||
| 381 | if·test·"$rc"·=·127;·then | ||
| 382 | » echo·"$stderr_of_call"·>&2 | ||
| 383 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 384 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 385 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 386 | » false··#·end·with·an·error·code | ||
| 387 | elif·test·"$rc"·!=·0;·then | ||
| 388 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 389 | » false··#·end·with·an·error·code | ||
| 390 | fi | ||
| 391 | Group ·Sudo· Group·contains·1·rule | 396 | Group ·Sudo· Group·contains·1·rule |
| 392 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 397 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 393 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 398 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 394 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed | 399 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed |
| 395 | to·execute. | 400 | to·execute. |
| 396 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. | 401 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. |
| Offset 576, 14 lines modified | Offset 576, 20 lines modified | ||
| 576 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 576 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 577 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 577 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 578 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 578 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 579 | ···········standards,·and·guidance. | 579 | ···········standards,·and·guidance. |
| 580 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 580 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 581 | Severity: ·high | 581 | Severity: ·high |
| 582 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue | 582 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue |
| 583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 584 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 585 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 586 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 587 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 588 | chgrp·-L·0·/etc/issue | ||
| 583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 589 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 584 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 590 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 585 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 591 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 586 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 592 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 587 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 593 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 588 | -·name:·Test·for·existence·/etc/issue | 594 | -·name:·Test·for·existence·/etc/issue |
| 589 | ··stat: | 595 | ··stat: |
| Offset 605, 31 lines modified | Offset 611, 31 lines modified | ||
| 605 | ··tags: | 611 | ··tags: |
| 606 | ··-·configure_strategy | 612 | ··-·configure_strategy |
| 607 | ··-·file_groupowner_etc_issue | 613 | ··-·file_groupowner_etc_issue |
| 608 | ··-·low_complexity | 614 | ··-·low_complexity |
| 609 | ··-·low_disruption | 615 | ··-·low_disruption |
| 610 | ··-·medium_severity | 616 | ··-·medium_severity |
| 611 | ··-·no_reboot_needed | 617 | ··-·no_reboot_needed |
| 612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 613 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 614 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 615 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 616 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 617 | chgrp·-L·0·/etc/issue | ||
| 618 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·L\x8Lo\x8og\x8gi\x8in\x8n·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·f\x8fo\x8or\x8r·R\x8Re\x8em\x8mo\x8ot\x8te\x8e·C\x8Co\x8on\x8nn\x8ne\x8ec\x8ct\x8ti\x8io\x8on\x8ns\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 618 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·L\x8Lo\x8og\x8gi\x8in\x8n·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·f\x8fo\x8or\x8r·R\x8Re\x8em\x8mo\x8ot\x8te\x8e·C\x8Co\x8on\x8nn\x8ne\x8ec\x8ct\x8ti\x8io\x8on\x8ns\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 619 | To·properly·set·the·group·owner·of·/etc/issue.net,·run·the·command: | 619 | To·properly·set·the·group·owner·of·/etc/issue.net,·run·the·command: |
| 620 | $·sudo·chgrp·root·/etc/issue.net | 620 | $·sudo·chgrp·root·/etc/issue.net |
| 621 | ············Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 621 | ············Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 622 | ············operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 622 | ············operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 623 | Rationale:··with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 623 | Rationale:··with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 624 | ············standards,·and·guidance. | 624 | ············standards,·and·guidance. |
| 625 | ············Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 625 | ············Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 626 | Severity: ··high | 626 | Severity: ··high |
| Max diff block lines reached; 364636/371012 bytes (98.28%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037ec0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037ed0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037ed0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037ee0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037ee0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037ef0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037ef0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037f00:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037f00:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037f10:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037f10:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2020·2861·7320·6f66·2032·3032·3 | 00037f30:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 00037f40:·2d3 | 00037f40:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 00037f50:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037f50:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037f60:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037f60:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037f70:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037f70:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037f80:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037f80:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037f90:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037f90:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037fa0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037fa0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037fb0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037fb0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 14927, 115 lines modified | Offset 14927, 115 lines modified | ||
| 0003a4e0:·6172·6765·743d·2223·6964·6d36·3538·3922··arget="#idm6589" | 0003a4e0:·6172·6765·743d·2223·6964·6d36·3538·3922··arget="#idm6589" | ||
| 0003a4f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003a4f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003a500:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003a500:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003a510:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003a510:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003a520:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003a520:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003a530:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003a530:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003a540:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003a540:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003a550:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003a560:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003a570:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003a580:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003a590:·6964·3d22·6964·6d36·3538·3922·3e3c·7461··id="idm6589"><ta | |||
| 0003a5a0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a5b0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a5c0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a5d0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a5e0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a550:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003a560:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003a570:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003a580:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003a590:·6522·2069·643d·2269·646d·3635·3839·223e··e"·id="idm6589"> | |||
| 0003a5a0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003a5b0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003a5c0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003a5d0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003a5e0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003a5f0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003a600:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a610:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003a | 0003a5f0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003a6 | 0003a600:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003a640:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003a650:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003a660:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003a6 | 0003a610:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003a620:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a630:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a640:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003a6 | 0003a650:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003a660:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003a670:·643e·636f·6e66·6967·7572·653c·2f74·643e··d>configure</td> | |||
| 0003a680:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003a690:·653e·3c63·6f64·653e·6368·6772·7020·2d4c··e><code>chgrp·-L | |||
| 0003a690:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003a6a0:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | |||
| 0003a6b0:·7465·6e63·6520·2f65·7463·2f70·6173·7377··tence·/etc/passw | |||
| 0003a6c0:·640a·2020·7374·6174·3a0a·2020·2020·7061··d.··stat:.····pa | |||
| 0003a6d0:·7468·3a20·2f65·7463·2f70·6173·7377·640a··th:·/etc/passwd. | |||
| 0003a6e0:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | |||
| 0003a6f0:·5f65·7869·7374·730a·2020·7461·6773·3a0a··_exists.··tags:. | |||
| 0003a700:·2020·2d20·434a·4953·2d35·2e35·2e32·2e32····-·CJIS-5.5.2.2 | |||
| 0003a710:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003a720:·2d41·432d·3628·3129·0a20·202d·204e·4953··-AC-6(1).··-·NIS | |||
| 0003a730:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003a740:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003a750:·2d38·2e37·2e63·0a20·202d·2050·4349·2d44··-8.7.c.··-·PCI-D | |||
| 0003a760:·5353·7634·2d32·2e32·2e36·0a20·202d·2063··SSv4-2.2.6.··-·c | |||
| 0003a770:·6f6e·6669·6775·7265·5f73·7472·6174·6567··onfigure_strateg | |||
| 0003a780:·790a·2020·2d20·6669·6c65·5f67·726f·7570··y.··-·file_group | |||
| 0003a790:·6f77·6e65·725f·6574·635f·7061·7373·7764··owner_etc_passwd | |||
| 0003a7a0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003a7b0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003a7c0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003a7d0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003a7e0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003a7f0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003a800:·6772·6f75·7020·6f77·6e65·7220·3020·6f6e··group·owner·0·on | |||
| 0003a | 0003a6a0:·2030·202f·6574·632f·7061·7373·7764·0a3c···0·/etc/passwd.< | ||
| 0003a6b0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003a6c0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003a6d0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003a6e0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003a6f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003a700:·2223·6964·6d36·3539·3022·2074·6162·696e··"#idm6590"·tabin | |||
| 0003a710:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003a720:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003a730:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003a740:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003a750:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003a760:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003a770:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003a820:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | |||
| 0003a830:·6574·632f·7061·7373·7764·0a20·2020·2067··etc/passwd.····g | |||
| 0003a840:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | |||
| 0003a850:·3a20·6669·6c65·5f65·7869·7374·732e·7374··:·file_exists.st | |||
| 0003a860:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an | |||
| 0003a870:·6420·6669·6c65·5f65·7869·7374·732e·7374··d·file_exists.st | |||
| 0003a880:·6174·2e65·7869·7374·730a·2020·7461·6773··at.exists.··tags | |||
| 0003a890:·3a0a·2020·2d20·434a·4953·2d35·2e35·2e32··:.··-·CJIS-5.5.2 | |||
| 0003a8a0:·2e32·0a20·202d·204e·4953·542d·3830·302d··.2.··-·NIST-800- | |||
| 0003a8b0:·3533·2d41·432d·3628·3129·0a20·202d·204e··53-AC-6(1).··-·N | |||
| 0003a8c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003a8d0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003a8e0:·6571·2d38·2e37·2e63·0a20·202d·2050·4349··eq-8.7.c.··-·PCI | |||
| 0003a8f0:·2d44·5353·7634·2d32·2e32·2e36·0a20·202d··-DSSv4-2.2.6.··- | |||
| 0003a900:·2063·6f6e·6669·6775·7265·5f73·7472·6174···configure_strat | |||
| 0003a910:·6567·790a·2020·2d20·6669·6c65·5f67·726f··egy.··-·file_gro | |||
| 0003a920:·7570·6f77·6e65·725f·6574·635f·7061·7373··upowner_etc_pass | |||
| 0003a930:·7764·0a20·202d·206c·6f77·5f63·6f6d·706c··wd.··-·low_compl | |||
| 0003a940:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003a950:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003a960:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003a970:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003a980:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003a990:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003a9a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003a9b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003a9c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003a9d0:·6574·3d22·2369·646d·3635·3930·2220·7461··et="#idm6590"·ta | |||
| Max diff block lines reached; 30692/46478 bytes (66.04%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:opensuse:leap:15.0 | 42 | ····*·cpe:/o:opensuse:leap:15.0 |
| 43 | ····*·cpe:/o:opensuse:leap:42.1 | 43 | ····*·cpe:/o:opensuse:leap:42.1 |
| 44 | ····*·cpe:/o:opensuse:leap:42.2 | 44 | ····*·cpe:/o:opensuse:leap:42.2 |
| 45 | ····*·cpe:/o:opensuse:leap:42.3 | 45 | ····*·cpe:/o:opensuse:leap:42.3 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 53 | Group ·Guide·to·the·Secure·Configuration·of·openSUSE· Group·contains·4·groups | 53 | Group ·Guide·to·the·Secure·Configuration·of·openSUSE· Group·contains·4·groups |
| 54 | and·3·rules | 54 | and·3·rules |
| 55 | Group ·System·Settings· Group·contains·3·groups·and·3·rules | 55 | Group ·System·Settings· Group·contains·3·groups·and·3·rules |
| Offset 106, 14 lines modified | Offset 106, 20 lines modified | ||
| 106 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 106 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 111 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 111 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 118 | chgrp·-L·0·/etc/passwd | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 118 | -·name:·Test·for·existence·/etc/passwd | 124 | -·name:·Test·for·existence·/etc/passwd |
| 119 | ··stat: | 125 | ··stat: |
| Offset 145, 20 lines modified | Offset 151, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-2.2.6 | 151 | ··-·PCI-DSSv4-2.2.6 |
| 146 | ··-·configure_strategy | 152 | ··-·configure_strategy |
| 147 | ··-·file_groupowner_etc_passwd | 153 | ··-·file_groupowner_etc_passwd |
| 148 | ··-·low_complexity | 154 | ··-·low_complexity |
| 149 | ··-·low_disruption | 155 | ··-·low_disruption |
| 150 | ··-·medium_severity | 156 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 157 | chgrp·-L·0·/etc/passwd | ||
| 158 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 159 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: | 159 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: |
| 160 | $·sudo·chown·root·/etc/passwd | 160 | $·sudo·chown·root·/etc/passwd |
| 161 | ············The·/etc/passwd·file·contains·information·about·the·users·that·are | 161 | ············The·/etc/passwd·file·contains·information·about·the·users·that·are |
| 162 | Rationale:··configured·on·the·system.·Protection·of·this·file·is·critical·for | 162 | Rationale:··configured·on·the·system.·Protection·of·this·file·is·critical·for |
| 163 | ············system·security. | 163 | ············system·security. |
| 164 | Severity: ··medium | 164 | Severity: ··medium |
| Offset 179, 14 lines modified | Offset 179, 20 lines modified | ||
| 179 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 179 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 182 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 182 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 184 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 184 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 185 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 185 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 191 | chown·-L·0·/etc/passwd | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 191 | -·name:·Test·for·existence·/etc/passwd | 197 | -·name:·Test·for·existence·/etc/passwd |
| 192 | ··stat: | 198 | ··stat: |
| Offset 218, 20 lines modified | Offset 224, 14 lines modified | ||
| 218 | ··-·PCI-DSSv4-2.2.6 | 224 | ··-·PCI-DSSv4-2.2.6 |
| 219 | ··-·configure_strategy | 225 | ··-·configure_strategy |
| 220 | ··-·file_owner_etc_passwd | 226 | ··-·file_owner_etc_passwd |
| 221 | ··-·low_complexity | 227 | ··-·low_complexity |
| 222 | ··-·low_disruption | 228 | ··-·low_disruption |
| 223 | ··-·medium_severity | 229 | ··-·medium_severity |
| 224 | ··-·no_reboot_needed | 230 | ··-·no_reboot_needed |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 230 | chown·-L·0·/etc/passwd | ||
| 231 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 231 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 232 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: | 232 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: |
| 233 | $·sudo·chmod·0644·/etc/passwd | 233 | $·sudo·chmod·0644·/etc/passwd |
| 234 | ············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world | 234 | ············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world |
| 235 | Rationale:··the·risk·of·its·compromise·is·increased.·The·file·contains·the·list | 235 | Rationale:··the·risk·of·its·compromise·is·increased.·The·file·contains·the·list |
| 236 | ············of·accounts·on·the·system·and·associated·information,·and | 236 | ············of·accounts·on·the·system·and·associated·information,·and |
| 237 | ············protection·of·this·file·is·critical·for·system·security. | 237 | ············protection·of·this·file·is·critical·for·system·security. |
| Offset 253, 14 lines modified | Offset 253, 25 lines modified | ||
| 253 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 253 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 254 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 254 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 255 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 255 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 256 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 256 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 257 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 257 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 258 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 258 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 259 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 259 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 265 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 267 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 268 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 269 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 270 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 265 | -·name:·Test·for·existence·/etc/passwd | 271 | -·name:·Test·for·existence·/etc/passwd |
| 266 | ··stat: | 272 | ··stat: |
| Offset 292, 22 lines modified | Offset 303, 11 lines modified | ||
| 292 | ··-·PCI-DSSv4-2.2.6 | 303 | ··-·PCI-DSSv4-2.2.6 |
| Max diff block lines reached; 675/6398 bytes (10.55%) of diff not shown. | |||
| Offset 14309, 15 lines modified | Offset 14309, 15 lines modified | ||
| 00037e40:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e40:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e50:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e50:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e60:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e60:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e70:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e70:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e80:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e80:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e90:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e90:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ea0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037eb0:·206f·6620·3230·323 | 00037eb0:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ed0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ed0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ee0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ee0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037ef0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037ef0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f00:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f00:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f10:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f10:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f20:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f20:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 14308, 15 lines modified | Offset 14308, 15 lines modified | ||
| 00037e30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037e90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037e90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ea0:·206f·6620·3230·323 | 00037ea0:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037eb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037eb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ec0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ec0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ed0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ed0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037ee0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037ee0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037ef0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037ef0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f00:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f00:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f10:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f10:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 14310, 15 lines modified | Offset 14310, 15 lines modified | ||
| 00037e50:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e50:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e60:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e60:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e70:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e70:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e80:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e80:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e90:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e90:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ea0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ea0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037eb0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037eb0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ec0:·206f·6620·3230·323 | 00037ec0:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ee0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ef0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ef0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f00:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f00:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f10:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f10:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f20:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f20:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f30:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f30:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 14309, 15 lines modified | Offset 14309, 15 lines modified | ||
| 00037e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037eb0:·3230·323 | 00037eb0:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 58 | ·········1.·_\x8M_\x8a_\x8i_\x8l_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 58 | ·········1.·_\x8M_\x8a_\x8i_\x8l_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 00037e50:·2d3 | 00037e50:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi-2022 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi-2022 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 | 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 |
| 55 | Group·contains·2·groups·and·3·rules | 55 | Group·contains·2·groups·and·3·rules |
| 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules | 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules |
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037dd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037de0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037de0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037df0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037df0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e00:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e00:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e10:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e10:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e20:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e20:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037e30:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037e40:·206f·6620·3230·323 | 00037e40:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e60:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e60:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e70:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e70:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e80:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e80:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e90:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e90:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037ea0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037ea0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037eb0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037eb0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 | 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 |
| 55 | Group·contains·2·groups·and·3·rules | 55 | Group·contains·2·groups·and·3·rules |
| 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules | 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules |
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2861·7320·6f66·2032·3032·3 | 00037e50:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00037e60:·3 | 00037e60:·3129·0a20·2020·2020·2020·2020·2020·2020··1).············· | ||
| 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 55 | ·········4.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 55 | ·········4.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 14356, 15 lines modified | Offset 14356, 15 lines modified | ||
| 00038130:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038130:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038140:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038140:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038150:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038150:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038160:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038160:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038170:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038170:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038180:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038180:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038190:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038190:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000381a0:·7320·6f66·2032·3032·3 | 000381a0:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 000381b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000381b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000381c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000381c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000381d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000381d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000381e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000381e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000381f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000381f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038200:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038200:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038210:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038210:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ |
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high-rev-4 | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high-rev-4 |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14356, 15 lines modified | Offset 14356, 15 lines modified | ||
| 00038130:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038130:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038140:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038140:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038150:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038150:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038160:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038160:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038170:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038170:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038180:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038180:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038190:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038190:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 000381a0:·3032·3 | 000381a0:·3032·352d·3132·2d31·3129·0a20·2020·2020··025-12-11).····· | ||
| 000381b0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 000381b0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000381c0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000381c0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000381d0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000381d0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000381e0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000381e0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000381f0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000381f0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038200:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038200:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038210:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038210:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system |
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14357, 16 lines modified | Offset 14357, 16 lines modified | ||
| 00038140:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038140:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038150:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038150:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038160:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038160:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038170:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038170:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038180:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038180:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038190:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038190:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 000381a0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000381a0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000381b0:·2020·2861·7320·6f66·2032·3032·3 | 000381b0:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 000381c0:·2d3 | 000381c0:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 000381d0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 000381d0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 000381e0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 000381e0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 000381f0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 000381f0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038200:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038200:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038210:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038210:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038220:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038220:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038230:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038230:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst |
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate-rev-4 | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate-rev-4 |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14357, 15 lines modified | Offset 14357, 15 lines modified | ||
| 00038140:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00038140:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00038150:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00038150:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038160:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038160:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038170:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038170:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038180:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038180:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038190:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038190:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 000381a0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 000381a0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 000381b0:·6f66·2032·3032·3 | 000381b0:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 000381c0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 000381c0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000381d0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000381d0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000381e0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000381e0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000381f0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000381f0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00038200:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00038200:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00038210:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00038210:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00038220:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00038220:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy |
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14315, 16 lines modified | Offset 14315, 16 lines modified | ||
| 00037ea0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037ea0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037eb0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037eb0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ec0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ec0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ed0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ed0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ee0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ee0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ef0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ef0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037f00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f10:·2020·2020·2028·6173·206f·6620·3230·323 | 00037f10:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037f20:·2d31·3 | 00037f20:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037f30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S |
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Infrastructure·Protection·(CIP)·cybersecurity·standards·profile | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Infrastructure·Protection·(CIP)·cybersecurity·standards·profile |
| 46 | ··············for·Red·Hat·Enterprise·Linux·CoreOS | 46 | ··············for·Red·Hat·Enterprise·Linux·CoreOS |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_nerc-cip | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_nerc-cip |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 49 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14287, 16 lines modified | Offset 14287, 16 lines modified | ||
| 00037ce0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037ce0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cf0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cf0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d00:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d00:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d10:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d10:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d20:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d20:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d30:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d30:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d50:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d50:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d60:·313 | 00037d60:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037d70:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d70:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d80:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d80:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d90:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d90:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037da0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037da0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037db0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037db0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037dc0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037dc0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037dd0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037dd0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig-v1r1 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig-v1r1 |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037ce0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cf0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cf0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037d00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037d00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037d10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037d10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d50:·6173·206f·6620·3230·323 | 00037d50:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037d60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037da0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037da0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037db0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037db0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037dc0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037dc0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| Offset 14321, 15 lines modified | Offset 14321, 15 lines modified | ||
| 00037f00:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037f00:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f10:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f10:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f20:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f20:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f30:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f30:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f40:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f40:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f50:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f50:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f60:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f60:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f70:·7320·6f66·2032·3032·3 | 00037f70:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 00037f80:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f80:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f90:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f90:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037fa0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037fa0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fb0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fb0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fc0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fc0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fd0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fd0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fe0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fe0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15097, 234 lines modified | Offset 15097, 234 lines modified | ||
| 0003af80:·7461·7267·6574·3d22·2369·646d·3732·3530··target="#idm7250 | 0003af80:·7461·7267·6574·3d22·2369·646d·3732·3530··target="#idm7250 | ||
| 0003af90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003af90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003afa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003afa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003afb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003afb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003afc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003afc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003afd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003afd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003afe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003afe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aff0:·696f·6e20· | 0003aff0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | ||
| 0003b000:· | 0003b000:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003b010:· | 0003b010:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b020:·6 | 0003b020:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b030:· | 0003b030:·6522·2069·643d·2269·646d·3732·3530·223e··e"·id="idm7250"> | ||
| 0003b040:· | 0003b040:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b050:· | 0003b050:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b060:· | 0003b060:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b070:· | 0003b070:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b080:· | 0003b080:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003b090:· | 0003b090:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b0a0:· | 0003b0a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b0b0:· | 0003b0b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b0c0:· | 0003b0c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b0d0:· | 0003b0d0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b0e0:·6 | 0003b0e0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b0f0:·6 | 0003b0f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b100:· | 0003b100:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b110:· | 0003b110:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b120:· | 0003b120:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b130:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003b1 | 0003b130:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | ||
| 0003b140:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b150:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b160:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b170:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b180:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b190:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b1a0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b1b0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b1c0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b1d0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b1e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b1f0:·6d37·3235·3122·2074·6162·696e·6465·783d··m7251"·tabindex= | |||
| 0003b200:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b210:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b220:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b230:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b240:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b250:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b260:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b270:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b280:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b290:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b2a0:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003b2b0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b2c0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b2d0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b2e0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b2f0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b300:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b310:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b320:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b330:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b340:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b350:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b360:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b370:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b380:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b390:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003b3a0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b3b0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b3c0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b3d0:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 0003b3e0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 0003b3f0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 0003b400:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 0003b410:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 0003b420:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 0003b430:·2220·3b20·7468·656e·0a20·2020·2064·6e66··"·;·then.····dnf | |||
| 0003b440:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003b450:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 0003b460:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003b470:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003b480:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003b490:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b4a0:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003b4b0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b4c0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b4d0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b4e0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b4f0:·6172·6765·743d·2223·6964·6d37·3235·3222··arget="#idm7252" | |||
| 0003b500:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b510:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b520:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b530:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b540:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b550:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b560:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b570:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b580:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b590:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b5a0:·6522·2069·643d·2269·646d·3732·3532·223e··e"·id="idm7252"> | |||
| 0003b5b0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b5c0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b5d0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b5e0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b5f0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b600:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b610:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b620:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b630:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b640:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b650:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| Max diff block lines reached; 20692881/20724951 bytes (99.85%) of diff not shown. | |||
| Offset 14320, 15 lines modified | Offset 14320, 15 lines modified | ||
| 00037ef0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037ef0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f00:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f00:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f10:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f10:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f20:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f20:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f30:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f30:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f40:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f40:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f50:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f50:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f60:·7320·6f66·2032·3032·3 | 00037f60:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 00037f70:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f70:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f80:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f80:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f90:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f90:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fa0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fa0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fb0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fb0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fc0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fc0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fd0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fd0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15102, 234 lines modified | Offset 15102, 234 lines modified | ||
| 0003afd0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003afd0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003afe0:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003afe0:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003aff0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003aff0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b000:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b000:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b010:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b010:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b020:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b020:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b030:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b030:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b040:·6961·7469·6f6e·20 | 0003b040:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | ||
| 0003b050:· | 0003b050:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b060:· | 0003b060:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b070:·6 | 0003b070:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b080:·6 | 0003b080:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | ||
| 0003b090:·3 | 0003b090:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | ||
| 0003b0a0:· | 0003b0a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b0b0:· | 0003b0b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b0c0:· | 0003b0c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b0d0:· | 0003b0d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b0e0:· | 0003b0e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b0f0:· | 0003b0f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b100:· | 0003b100:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b110:· | 0003b110:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b120:· | 0003b120:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b130:· | 0003b130:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b140:· | 0003b140:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b150:· | 0003b150:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b160:· | 0003b160:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003b170:· | 0003b170:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b180:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b190:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b1a0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b1b0:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b1c0:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b1d0:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b1e0:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b1f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b200:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b210:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b220:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b230:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b240:·2369·646d·3732·3531·2220·7461·6269·6e64··#idm7251"·tabind | |||
| 0003b250:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b260:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b270:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b280:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b290:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b2a0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b2b0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b2c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b2d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b2e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b2f0:·3732·3531·223e·3c74·6162·6c65·2063·6c61··7251"><table·cla | |||
| 0003b300:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b310:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b320:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b330:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b340:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b350:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b360:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b370:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b380:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b390:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b3a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b3b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b3c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b3d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b3e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b3f0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b400:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b410:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b420:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003b430:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003b440:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003b450:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003b460:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003b470:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003b480:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003b490:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 0003b4a0:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003b4b0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b4c0:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b4d0:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b4e0:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b4f0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b500:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b510:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b520:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b530:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b540:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b550:·3532·2220·7461·6269·6e64·6578·3d22·3022··52"·tabindex="0" | |||
| 0003b560:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b570:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b580:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b590:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b5a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b5b0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b5c0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b5d0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b5e0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b5f0:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b600:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b610:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b620:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b630:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b640:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b650:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b660:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b670:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b680:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b690:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b6a0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b6b0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| Max diff block lines reached; 21116020/21148090 bytes (99.85%) of diff not shown. | |||
| Offset 14322, 15 lines modified | Offset 14322, 15 lines modified | ||
| 00037f10:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037f10:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f20:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f20:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f30:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f30:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f40:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f40:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f50:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f50:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f60:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f60:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f70:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f70:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f80:·7320·6f66·2032·3032·3 | 00037f80:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 00037f90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037fa0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037fa0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037fb0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037fb0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fc0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fc0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fd0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fd0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fe0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fe0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037ff0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037ff0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15093, 234 lines modified | Offset 15093, 234 lines modified | ||
| 0003af40:·6765·743d·2223·6964·6d37·3235·3022·2074··get="#idm7250"·t | 0003af40:·6765·743d·2223·6964·6d37·3235·3022·2074··get="#idm7250"·t | ||
| 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afb0:·20 | 0003afb0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | ||
| 0003afc0:· | 0003afc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003afd0:· | 0003afd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003afe0:·6 | 0003afe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003aff0:· | 0003aff0:·6964·3d22·6964·6d37·3235·3022·3e3c·7461··id="idm7250"><ta | ||
| 0003b000:· | 0003b000:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b010:· | 0003b010:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b020:· | 0003b020:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b030:· | 0003b030:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b040:· | 0003b040:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b050:· | 0003b050:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b060:· | 0003b060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b070:· | 0003b070:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003b080:· | 0003b080:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b090:· | 0003b090:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b0a0:· | 0003b0a0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b0b0:· | 0003b0b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b0c0:· | 0003b0c0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b0d0:· | 0003b0d0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003b0e0:· | 0003b0e0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b0f0:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003b | 0003b0f0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | ||
| 0003b100:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b110:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b120:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b130:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b140:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b150:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b160:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b170:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b180:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b190:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b1a0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b1b0:·3531·2220·7461·6269·6e64·6578·3d22·3022··51"·tabindex="0" | |||
| 0003b1c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b1d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b1e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b1f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b200:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b210:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b220:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b230:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b240:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b250:·6522·2069·643d·2269·646d·3732·3531·223e··e"·id="idm7251"> | |||
| 0003b260:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b270:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b280:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b290:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b2a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b2b0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b2c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b2d0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b2e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b2f0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b300:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b310:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b320:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b330:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b340:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b350:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | |||
| 0003b360:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b370:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b380:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b390:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b3a0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b3b0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b3c0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b3d0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003b3e0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003b3f0:·2074·6865·6e0a·2020·2020·646e·6620·696e···then.····dnf·in | |||
| 0003b400:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b410:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003b420:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b430:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b440:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b450:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b460:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b470:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b480:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b490:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b4a0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b4b0:·6574·3d22·2369·646d·3732·3532·2220·7461··et="#idm7252"·ta | |||
| 0003b4c0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b4d0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b4e0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b4f0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b500:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b510:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b520:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b530:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b540:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b550:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b560:·6964·3d22·6964·6d37·3235·3222·3e3c·7461··id="idm7252"><ta | |||
| 0003b570:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b580:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b590:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b5a0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b5b0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b5c0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b5d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b5e0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b5f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b600:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b610:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| Max diff block lines reached; 9042144/9074214 bytes (99.65%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 118, 33 lines modified | Offset 118, 41 lines modified | ||
| 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ·············_\x8c_\x8i_\x8s············6.1.1 | 123 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package·--add=aide | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | include·install_aide | 130 | include·install_aide |
| 137 | class·install_aide·{ | 131 | class·install_aide·{ |
| 138 | ··package·{·'aide': | 132 | ··package·{·'aide': |
| 139 | ····ensure·=>·'installed', | 133 | ····ensure·=>·'installed', |
| 140 | ··} | 134 | ··} |
| 141 | } | 135 | } |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 142 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 143 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 144 | ····dnf·install·-y·"aide" | ||
| 145 | fi | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Ensure·aide·is·installed | 154 | -·name:·Ensure·aide·is·installed |
| 148 | ··package: | 155 | ··package: |
| Offset 164, 36 lines modified | Offset 172, 28 lines modified | ||
| 164 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | [[packages]] | 175 | [[packages]] |
| 168 | name·=·"aide" | 176 | name·=·"aide" |
| 169 | version·=·"*" | 177 | version·=·"*" |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 177 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 178 | ····dnf·install·-y·"aide" | ||
| 179 | fi | ||
| 183 | package·install·aide | ||
| 180 | else | ||
| 181 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 182 | fi | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | package· | 189 | package·--add=aide |
| 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 190 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 191 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 193 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 194 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 194 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 195 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 195 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 218, 14 lines modified | Offset 218, 28 lines modified | ||
| 218 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 218 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 219 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 219 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 223 | ·············_\x8c_\x8i_\x8s············6.1.1 | 223 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 227 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 228 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 229 | ····dnf·install·-y·"aide" | ||
| 230 | fi | ||
| 231 | /usr/sbin/aide·--init | ||
| 232 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 233 | else | ||
| 234 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 235 | fi | ||
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1057004/1062867 bytes (99.45%) of diff not shown. | |||
| Offset 14321, 15 lines modified | Offset 14321, 15 lines modified | ||
| 00037f00:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037f00:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037f10:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037f10:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037f20:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037f20:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037f30:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037f30:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037f40:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037f40:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037f50:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037f50:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037f60:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037f60:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037f70:·2032·3032·3 | 00037f70:·2032·3032·352d·3132·2d31·3129·0a20·2020···2025-12-11).··· | ||
| 00037f80:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037f80:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037f90:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037f90:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037fa0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037fa0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037fb0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037fb0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037fc0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037fc0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037fd0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037fd0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037fe0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037fe0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14771, 217 lines modified | Offset 14771, 217 lines modified | ||
| 00039b20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00039b20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00039b30:·3036·3837·2220·7461·6269·6e64·6578·3d22··0687"·tabindex=" | 00039b30:·3036·3837·2220·7461·6269·6e64·6578·3d22··0687"·tabindex=" | ||
| 00039b40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00039b40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039b50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039b50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039b60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039b60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039b70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039b70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039b80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039b80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039b90:·6469·6174·696f·6e20· | 00039b90:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 00039ba0:· | 00039ba0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039bb0:· | 00039bb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039bc0:· | 00039bc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039bd0:·6 | 00039bd0:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | ||
| 00039be0:·3 | 00039be0:·3638·3722·3e3c·7461·626c·6520·636c·6173··687"><table·clas | ||
| 00039bf0:· | 00039bf0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 00039c00:· | 00039c00:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 00039c10:·6 | 00039c10:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 00039c20:·6 | 00039c20:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 00039c30:· | 00039c30:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 00039c40:· | 00039c40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 00039c50:· | 00039c50:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 00039c60:· | 00039c60:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 00039c70:· | 00039c70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 00039c80:· | 00039c80:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 00039c90:· | 00039c90:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 00039ca0:· | 00039ca0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 00039cb0:· | 00039cb0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 00039cc0:· | 00039cc0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 00039cd0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 00039ce0:·6c75·6465·2069·6e73·7461·6c6c·5f64·6e66··lude·install_dnf | |||
| 00039cf0:·2d61·7574·6f6d·6174·6963·0a0a·636c·6173··-automatic..clas | |||
| 00039d00:·7320·696e·7374·616c·6c5f·646e·662d·6175··s·install_dnf-au | |||
| 00039d10:·746f·6d61·7469·6320·7b0a·2020·7061·636b··tomatic·{.··pack | |||
| 00039d20:·6167·6520·7b20·2764·6e66·2d61·7574·6f6d··age·{·'dnf-autom | |||
| 00039d30:·6174·6963·273a·0a20·2020·2065·6e73·7572··atic':.····ensur | |||
| 00039d40:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 00039d50:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 00039d60:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00039d70:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00039d80:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00039d90:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00039da0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00039db0:·6d31·3036·3838·2220·7461·6269·6e64·6578··m10688"·tabindex | |||
| 00039dc0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 00039dd0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 00039de0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 00039df0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 00039e00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 00039e10:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 00039e20:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00039e30:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00039e40:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00039e50:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 00039e60:·3638·3822·3e3c·7461·626c·6520·636c·6173··688"><table·clas | |||
| 00039e70:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039e80:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00039e90:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00039ea0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039eb0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039ec0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039ed0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039ee0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039ef0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039f00:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00039f10:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00039f20:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039f30:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039f40:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00039 | 00039f50:·653e·3c70·7265·3e3c·636f·6465·3e0a·6966··e><pre><code>.if | ||
| 00039ce0:·7061·636b·6167·6520·2d2d·6164·643d·646e··package·--add=dn | |||
| 00039cf0:·662d·6175·746f·6d61·7469·630a·3c2f·636f··f-automatic.</co | |||
| 00039d00:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 00039d10:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 00039d20:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 00039 | 00039f60:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | ||
| 00039f70:·7420·2264·6e66·2d61·7574·6f6d·6174·6963··t·"dnf-automatic | |||
| 00039f80:·2220·3b20·7468·656e·0a20·2020·2064·6e66··"·;·then.····dnf | |||
| 00039f90:·2069·6e73·7461·6c6c·202d·7920·2264·6e66···install·-y·"dnf | |||
| 00039fa0:·2d61·7574·6f6d·6174·6963·220a·6669·0a3c··-automatic".fi.< | |||
| 00039fb0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00039fc0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00039fd0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00039fe0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00039ff0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003a000:·2223·6964·6d31·3036·3839·2220·7461·6269··"#idm10689"·tabi | |||
| 0003a010:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003a020:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003a030:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003a040:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003a050:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003a060:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003a070:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003a080:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a090:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a0a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a0b0:·3d22·6964·6d31·3036·3839·223e·3c74·6162··="idm10689"><tab | |||
| 0003a0c0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003a0d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a0e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a0f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a100:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a110:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a120:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a130:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a140:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a150:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a160:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a170:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a180:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003a190:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003a1a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003a1b0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| Max diff block lines reached; 2946994/2976718 bytes (99.00%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 59 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 59 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 60 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 60 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 84, 33 lines modified | Offset 84, 35 lines modified | ||
| 84 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 84 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 85 | ·············suitable·for·automatic,·regular·execution. | 85 | ·············suitable·for·automatic,·regular·execution. |
| 86 | Severity: ···medium | 86 | Severity: ···medium |
| 87 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 87 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 88 | Identifiers:·CCE-87561-7 | 88 | Identifiers:·CCE-87561-7 |
| 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 96 | package·--add=dnf-automatic | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 102 | include·install_dnf-automatic | 96 | include·install_dnf-automatic |
| 103 | class·install_dnf-automatic·{ | 97 | class·install_dnf-automatic·{ |
| 104 | ··package·{·'dnf-automatic': | 98 | ··package·{·'dnf-automatic': |
| 105 | ····ensure·=>·'installed', | 99 | ····ensure·=>·'installed', |
| 106 | ··} | 100 | ··} |
| 107 | } | 101 | } |
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 107 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 108 | ····dnf·install·-y·"dnf-automatic" | ||
| 109 | fi | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | -·name:·Ensure·dnf-automatic·is·installed | 115 | -·name:·Ensure·dnf-automatic·is·installed |
| 114 | ··package: | 116 | ··package: |
| Offset 125, 30 lines modified | Offset 127, 28 lines modified | ||
| 125 | ··-·no_reboot_needed | 127 | ··-·no_reboot_needed |
| 126 | ··-·package_dnf-automatic_installed | 128 | ··-·package_dnf-automatic_installed |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | [[packages]] | 130 | [[packages]] |
| 129 | name·=·"dnf-automatic" | 131 | name·=·"dnf-automatic" |
| 130 | version·=·"*" | 132 | version·=·"*" |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | package·install·dnf-automatic | ||
| 136 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 137 | ····dnf·install·-y·"dnf-automatic" | ||
| 138 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | package· | 144 | package·--add=dnf-automatic |
| 145 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 145 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 146 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 146 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 147 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 147 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 148 | automatic.conf. | 148 | automatic.conf. |
| 149 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 149 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 150 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 150 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 151 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 151 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 159, 37 lines modified | Offset 159, 14 lines modified | ||
| 159 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 159 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 160 | Identifiers:·CCE-86671-5 | 160 | Identifiers:·CCE-86671-5 |
| 161 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 161 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 162 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 162 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 163 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 163 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 164 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 164 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 165 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 165 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 171 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 172 | ··ini_file: | ||
| 173 | ····dest:·/etc/dnf/automatic.conf | ||
| 174 | ····section:·commands | ||
| 175 | ····option:·apply_updates | ||
| 176 | ····value:·'yes' | ||
| 177 | ····create:·true | ||
| 178 | ··tags: | ||
| 179 | ··-·CCE-86671-5 | ||
| 180 | ··-·NIST-800-53-CM-6(a) | ||
| 181 | ··-·NIST-800-53-SI-2(5) | ||
| 182 | ··-·NIST-800-53-SI-2(c) | ||
| 183 | ··-·dnf-automatic_apply_updates | ||
| 184 | ··-·low_complexity | ||
| 185 | ··-·medium_disruption | ||
| 186 | ··-·medium_severity | ||
| 187 | ··-·no_reboot_needed | ||
| 188 | ··-·unknown_strategy | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 190 | found=false | 167 | found=false |
| 191 | #·set·value·in·all·files·if·they·contain·section·or·key | 168 | #·set·value·in·all·files·if·they·contain·section·or·key |
| 192 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | 169 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do |
| Max diff block lines reached; 209617/215389 bytes (97.32%) of diff not shown. | |||
| Offset 14292, 16 lines modified | Offset 14292, 16 lines modified | ||
| 00037d30:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037d30:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037d40:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037d40:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037d50:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037d50:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037d60:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037d60:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037d70:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037d70:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037d80:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037d80:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·2861·7320·6f66·2032·3032·3 | 00037da0:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00037db0:·3 | 00037db0:·3129·0a20·2020·2020·2020·2020·2020·2020··1).············· | ||
| 00037dc0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037dc0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037dd0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037dd0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037de0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037de0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037df0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037df0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037e00:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037e00:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037e10:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037e10:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037e20:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037e20:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15135, 235 lines modified | Offset 15135, 235 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d37·3235·3022·2074·6162·696e·6465··idm7250"·tabinde | 0003b1f0:·6964·6d37·3235·3022·2074·6162·696e·6465··idm7250"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·20 | 0003b250:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003b260:· | 0003b260:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003b270:· | 0003b270:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b280:· | 0003b280:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b290:·6 | 0003b290:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b2a0:·6 | 0003b2a0:·6d37·3235·3022·3e3c·7461·626c·6520·636c··m7250"><table·cl | ||
| 0003b2b0:·6 | 0003b2b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b2c0:· | 0003b2c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b2d0:· | 0003b2d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b2e0:·6 | 0003b2e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b2f0:· | 0003b2f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b300:· | 0003b300:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b310:· | 0003b310:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b320:·7 | 0003b320:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b330:· | 0003b330:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b340:· | 0003b340:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b350:· | 0003b350:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b360:· | 0003b360:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b370:· | 0003b370:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b380:·6 | 0003b380:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b390:· | 0003b390:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | ||
| 0003b3a0:· | 0003b3a0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | ||
| 0003b3b0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b3c0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b3d0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b3e0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b3f0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b400:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b410:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b420:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b430:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b440:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b450:·6574·3d22·2369·646d·3732·3531·2220·7461··et="#idm7251"·ta | |||
| 0003b460:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b470:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b480:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b490:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b4a0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b4b0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b4c0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b4d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b4e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b4f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b500:·2269·646d·3732·3531·223e·3c74·6162·6c65··"idm7251"><table | |||
| 0003b510:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b520:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b530:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b540:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b550:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b560:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b570:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b580:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b590:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b5a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b5b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b5c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b5d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b5e0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b5f0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b600:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003b610:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003b620:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003b630:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003b640:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003b650:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003b660:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003b670:·7265·6e76·205d·3b20·7468·656e·0a0a·6966··renv·];·then..if | |||
| 0003b680:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003b690:·7420·2261·6964·6522·203b·2074·6865·6e0a··t·"aide"·;·then. | |||
| 0003b6a0:·2020·2020·646e·6620·696e·7374·616c·6c20······dnf·install· | |||
| 0003b6b0:·2d79·2022·6169·6465·220a·6669·0a0a·656c··-y·"aide".fi..el | |||
| 0003b6c0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003b6d0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003b6e0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003b6f0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003b700:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003b710:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b720:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b730:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b740:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b750:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b760:·646d·3732·3532·2220·7461·6269·6e64·6578··dm7252"·tabindex | |||
| 0003b770:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b780:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b790:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b7a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b7b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b7c0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b7d0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b7e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b7f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b800:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b810:·6d37·3235·3222·3e3c·7461·626c·6520·636c··m7252"><table·cl | |||
| 0003b820:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b830:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b840:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b850:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b860:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b870:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b880:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b890:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b8a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b8b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| Max diff block lines reached; 23775758/23808104 bytes (99.86%) of diff not shown. | |||
| Offset 14293, 15 lines modified | Offset 14293, 15 lines modified | ||
| 00037d40:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d40:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037d50:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037d50:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037d60:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037d60:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037d70:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037d70:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037d80:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037d80:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037d90:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037d90:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037da0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037da0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037db0:·2032·3032·3 | 00037db0:·2032·3032·352d·3132·2d31·3129·0a20·2020···2025-12-11).··· | ||
| 00037dc0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037dc0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037dd0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037dd0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037de0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037de0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037df0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037df0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e00:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e00:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e10:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e10:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e20:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e20:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15104, 234 lines modified | Offset 15104, 234 lines modified | ||
| 0003aff0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003aff0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b000:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b000:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b060:·6174·696f·6e20· | 0003b060:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | ||
| 0003b070:· | 0003b070:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b080:· | 0003b080:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b090:·6 | 0003b090:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b0a0:· | 0003b0a0:·7073·6522·2069·643d·2269·646d·3732·3530··pse"·id="idm7250 | ||
| 0003b0b0:· | 0003b0b0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b0c0:· | 0003b0c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b0d0:·7 | 0003b0d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b0e0:·65 | 0003b0e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b0f0:·6 | 0003b0f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b100:·6 | 0003b100:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b110:·6 | 0003b110:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b120:· | 0003b120:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b130:· | 0003b130:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b140:· | 0003b140:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b150:· | 0003b150:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b160:·6 | 0003b160:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b170:· | 0003b170:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b180:· | 0003b180:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b190:· | 0003b190:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b1a0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b1b0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b1c0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b1d0:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b1e0:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b1f0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b200:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b210:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b220:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b230:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b240:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b250:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b260:·6964·6d37·3235·3122·2074·6162·696e·6465··idm7251"·tabinde | |||
| 0003b270:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b280:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b290:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b2a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b2b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b2c0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b2d0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b2e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b2f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b300:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b310:·3235·3122·3e3c·7461·626c·6520·636c·6173··251"><table·clas | |||
| 0003b320:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b330:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b340:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b350:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b360:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b370:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b380:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b390:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b3a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b3b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b3c0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b3d0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b3e0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b3f0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b400:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b410:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b420:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b430:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b440:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b450:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b460:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b470:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b480:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b490:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b4a0:·6465·2220·3b20·7468·656e·0a20·2020·2064··de"·;·then.····d | |||
| 0003b4b0:·6e66·2069·6e73·7461·6c6c·202d·7920·2261··nf·install·-y·"a | |||
| 0003b4c0:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003b4d0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b4e0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b4f0:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b500:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b510:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b520:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b530:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b540:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b550:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b560:·2d74·6172·6765·743d·2223·6964·6d37·3235··-target="#idm725 | |||
| 0003b570:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b580:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b590:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b5a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b5b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b5c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b5d0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b5e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b5f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b600:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b610:·7073·6522·2069·643d·2269·646d·3732·3532··pse"·id="idm7252 | |||
| 0003b620:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b630:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b640:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b650:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b660:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b670:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b680:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b690:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b6a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b6b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b6c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b6d0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| Max diff block lines reached; 10524385/10556455 bytes (99.70%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- |
| 41 | ··············Server | 41 | ··············Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 103, 33 lines modified | Offset 103, 41 lines modified | ||
| 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | package·--add=aide | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 121 | include·install_aide | 115 | include·install_aide |
| 122 | class·install_aide·{ | 116 | class·install_aide·{ |
| 123 | ··package·{·'aide': | 117 | ··package·{·'aide': |
| 124 | ····ensure·=>·'installed', | 118 | ····ensure·=>·'installed', |
| 125 | ··} | 119 | ··} |
| 126 | } | 120 | } |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 127 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 128 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 129 | ····dnf·install·-y·"aide" | ||
| 130 | fi | ||
| 131 | else | ||
| 132 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 133 | fi | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 140 | ··package: |
| Offset 149, 36 lines modified | Offset 157, 28 lines modified | ||
| 149 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 150 | ··-·package_aide_installed | 158 | ··-·package_aide_installed |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | [[packages]] | 160 | [[packages]] |
| 153 | name·=·"aide" | 161 | name·=·"aide" |
| 154 | version·=·"*" | 162 | version·=·"*" |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 162 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 163 | ····dnf·install·-y·"aide" | ||
| 164 | fi | ||
| 168 | package·install·aide | ||
| 165 | else | ||
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 167 | fi | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | package· | 174 | package·--add=aide |
| 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 175 | Run·the·following·command·to·generate·a·new·database: | 176 | Run·the·following·command·to·generate·a·new·database: |
| 176 | $·sudo·/usr/sbin/aide·--init | 177 | $·sudo·/usr/sbin/aide·--init |
| 177 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 178 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 179 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 179 | To·initiate·a·manual·check,·run·the·following·command: | 180 | To·initiate·a·manual·check,·run·the·following·command: |
| 180 | $·sudo·/usr/sbin/aide·--check | 181 | $·sudo·/usr/sbin/aide·--check |
| Offset 196, 14 lines modified | Offset 196, 28 lines modified | ||
| 196 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 196 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 197 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 197 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 198 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 198 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 199 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 199 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 200 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 200 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 201 | ·············_\x8c_\x8i_\x8s············6.1.1 | 201 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 202 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 202 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 204 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 205 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 206 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 207 | ····dnf·install·-y·"aide" | ||
| 208 | fi | ||
| 209 | /usr/sbin/aide·--init | ||
| 210 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 211 | else | ||
| 212 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 213 | fi | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1303805/1309738 bytes (99.55%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037dc0:·3230·323 | 00037dc0:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15095, 234 lines modified | Offset 15095, 234 lines modified | ||
| 0003af60:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003af60:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003af70:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003af70:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003af80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003af80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003af90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003af90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003afa0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003afa0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003afb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003afb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003afc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003afc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003afd0:·6961·7469·6f6e·20 | 0003afd0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | ||
| 0003afe0:· | 0003afe0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003aff0:· | 0003aff0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b000:·6 | 0003b000:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b010:·6 | 0003b010:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | ||
| 0003b020:·3 | 0003b020:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | ||
| 0003b030:· | 0003b030:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b040:· | 0003b040:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b050:· | 0003b050:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b060:· | 0003b060:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b070:· | 0003b070:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b080:· | 0003b080:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b090:· | 0003b090:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b0a0:· | 0003b0a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b0b0:· | 0003b0b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b0c0:· | 0003b0c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b0d0:· | 0003b0d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b0e0:· | 0003b0e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b0f0:· | 0003b0f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003b100:· | 0003b100:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b110:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b120:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b130:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b140:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b150:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b160:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b170:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b180:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b190:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b1a0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b1b0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b1c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b1d0:·2369·646d·3732·3531·2220·7461·6269·6e64··#idm7251"·tabind | |||
| 0003b1e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b1f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b200:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b210:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b220:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b230:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b240:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b250:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b260:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b270:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b280:·3732·3531·223e·3c74·6162·6c65·2063·6c61··7251"><table·cla | |||
| 0003b290:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b2a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b2b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b2c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b2d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b2e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b2f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b300:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b310:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b320:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b330:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b340:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b350:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b360:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b370:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b380:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b390:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b3a0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b3b0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003b3c0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003b3d0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003b3e0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003b3f0:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003b400:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003b410:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003b420:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 0003b430:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003b440:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b450:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b460:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b470:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b480:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b490:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b4a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b4b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b4c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4d0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b4e0:·3532·2220·7461·6269·6e64·6578·3d22·3022··52"·tabindex="0" | |||
| 0003b4f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b500:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b510:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b520:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b530:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b540:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b550:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b560:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b570:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b580:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b590:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b5a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b5b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b5c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b5d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b5e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b5f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b600:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b610:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b620:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b630:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b640:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| Max diff block lines reached; 10161412/10193482 bytes (99.69%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- |
| 41 | ··············Workstation | 41 | ··············Workstation |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 33 lines modified | Offset 101, 41 lines modified | ||
| 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ·············_\x8c_\x8i_\x8s············6.1.1 | 106 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | package·--add=aide | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 119 | include·install_aide | 113 | include·install_aide |
| 120 | class·install_aide·{ | 114 | class·install_aide·{ |
| 121 | ··package·{·'aide': | 115 | ··package·{·'aide': |
| 122 | ····ensure·=>·'installed', | 116 | ····ensure·=>·'installed', |
| 123 | ··} | 117 | ··} |
| 124 | } | 118 | } |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 125 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 126 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 127 | ····dnf·install·-y·"aide" | ||
| 128 | fi | ||
| 129 | else | ||
| 130 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 131 | fi | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 138 | ··package: |
| Offset 147, 36 lines modified | Offset 155, 28 lines modified | ||
| 147 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 148 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | [[packages]] | 158 | [[packages]] |
| 151 | name·=·"aide" | 159 | name·=·"aide" |
| 152 | version·=·"*" | 160 | version·=·"*" |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 160 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 161 | ····dnf·install·-y·"aide" | ||
| 162 | fi | ||
| 166 | package·install·aide | ||
| 163 | else | ||
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 165 | fi | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | package· | 172 | package·--add=aide |
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 173 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | Run·the·following·command·to·generate·a·new·database: | 174 | Run·the·following·command·to·generate·a·new·database: |
| 174 | $·sudo·/usr/sbin/aide·--init | 175 | $·sudo·/usr/sbin/aide·--init |
| 175 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 176 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 176 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 177 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 177 | To·initiate·a·manual·check,·run·the·following·command: | 178 | To·initiate·a·manual·check,·run·the·following·command: |
| 178 | $·sudo·/usr/sbin/aide·--check | 179 | $·sudo·/usr/sbin/aide·--check |
| Offset 194, 14 lines modified | Offset 194, 28 lines modified | ||
| 194 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 194 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 195 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 195 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 196 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 196 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 197 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 197 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 198 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 198 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 199 | ·············_\x8c_\x8i_\x8s············6.1.1 | 199 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 200 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 200 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 202 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 203 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 204 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 205 | ····dnf·install·-y·"aide" | ||
| 206 | fi | ||
| 207 | /usr/sbin/aide·--init | ||
| 208 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 209 | else | ||
| 210 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 211 | fi | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1260813/1266756 bytes (99.53%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037dc0:·3230·323 | 00037dc0:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15127, 234 lines modified | Offset 15127, 234 lines modified | ||
| 0003b160:·6574·3d22·2369·646d·3732·3530·2220·7461··et="#idm7250"·ta | 0003b160:·6574·3d22·2369·646d·3732·3530·2220·7461··et="#idm7250"·ta | ||
| 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1d0:· | 0003b1d0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | ||
| 0003b1e0:· | 0003b1e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b1f0:· | 0003b1f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b200:·6 | 0003b200:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b210:· | 0003b210:·643d·2269·646d·3732·3530·223e·3c74·6162··d="idm7250"><tab | ||
| 0003b220:·6 | 0003b220:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b230:· | 0003b230:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b240:· | 0003b240:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b250:·6 | 0003b250:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b260:· | 0003b260:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b270:· | 0003b270:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b280:· | 0003b280:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b290:· | 0003b290:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b2a0:· | 0003b2a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b2b0:· | 0003b2b0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b2c0:· | 0003b2c0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b2d0:· | 0003b2d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b2e0:· | 0003b2e0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b2f0:· | 0003b2f0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003b300:· | 0003b300:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b310:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 0003b3 | 0003b310:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | ||
| 0003b320:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b330:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b340:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b350:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b360:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b370:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b380:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b390:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b3a0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b3b0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b3c0:·2d74·6172·6765·743d·2223·6964·6d37·3235··-target="#idm725 | |||
| 0003b3d0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003b3e0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b3f0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b400:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b410:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b420:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b430:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b440:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b450:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b460:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b470:·2220·6964·3d22·6964·6d37·3235·3122·3e3c··"·id="idm7251">< | |||
| 0003b480:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b490:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b4a0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b4b0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b4c0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b4d0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b4e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b4f0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b500:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b510:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b520:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b530:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b540:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b550:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b560:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b570:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003b580:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003b590:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003b5a0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003b5b0:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003b5c0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003b5d0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0003b5e0:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0003b5f0:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 0003b600:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 0003b610:·7468·656e·0a20·2020·2064·6e66·2069·6e73··then.····dnf·ins | |||
| 0003b620:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| 0003b630:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 0003b640:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003b650:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003b660:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003b670:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b680:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b690:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b6a0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b6b0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b6c0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b6d0:·743d·2223·6964·6d37·3235·3222·2074·6162··t="#idm7252"·tab | |||
| 0003b6e0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b6f0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b700:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b710:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b720:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b730:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b740:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b750:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b760:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b770:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b780:·643d·2269·646d·3732·3532·223e·3c74·6162··d="idm7252"><tab | |||
| 0003b790:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b7a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b7b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b7c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b7d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b7e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b7f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b800:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b810:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b820:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b830:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| Max diff block lines reached; 23588174/23620244 bytes (99.86%) of diff not shown. | |||
| Offset 14306, 15 lines modified | Offset 14306, 15 lines modified | ||
| 00037e10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037e10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037e20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037e20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037e30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037e30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e80:·3032·3 | 00037e80:·3032·352d·3132·2d31·3129·0a20·2020·2020··025-12-11).····· | ||
| 00037e90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037ea0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037ea0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037eb0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037eb0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037ec0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037ec0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037ed0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037ed0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037ee0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037ee0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ef0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ef0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15188, 306 lines modified | Offset 15188, 306 lines modified | ||
| 0003b530:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b530:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b540:·6d36·3930·3822·2074·6162·696e·6465·783d··m6908"·tabindex= | 0003b540:·6d36·3930·3822·2074·6162·696e·6465·783d··m6908"·tabindex= | ||
| 0003b550:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b550:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b560:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b560:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b570:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b570:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b580:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b580:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b590:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b590:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b5a0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b5b0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b5c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b5d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b5e0:·6170·7365·2220·6964·3d22·6964·6d36·3930··apse"·id="idm690 | |||
| 0003b5f0:·3822·3e3c·7072·653e·3c63·6f64·653e·0a23··8"><pre><code>.# | |||
| 0003b600:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | |||
| 0003b610:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | |||
| 0003b620:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | |||
| 0003b630:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | |||
| 0003b640:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | |||
| 0003b650:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | |||
| 0003b660:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | |||
| 0003b670:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | |||
| 0003b680:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b690:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | |||
| 0003b6a0:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | |||
| 0003b6b0:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | |||
| 0003b6c0:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | |||
| 0003b6d0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | |||
| 0003b6e0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b6f0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | |||
| 0003b700:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | |||
| 0003b710:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | |||
| 0003b720:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | |||
| 0003b730:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | |||
| 0003b740:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | |||
| 0003b750:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | |||
| 0003b760:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | |||
| 0003b770:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | |||
| 0003b780:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | |||
| 0003b790:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | |||
| 0003b7a0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b7b0:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | |||
| 0003b7c0:·0a0a·2020·2020·0a20·2020·2064·6e66·2072··..····.····dnf·r | |||
| 0003b7d0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | |||
| 0003b7e0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003b7f0:·6c6c·0a20·2020·200a·6669·0a3c·2f63·6f64··ll.····.fi.</cod | |||
| 0003b800:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b810:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b820:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b830:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b840:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b850:·6d36·3930·3922·2074·6162·696e·6465·783d··m6909"·tabindex= | |||
| 0003b860:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b870:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b880:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b890:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b8a0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003b8b0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b | 0003b8c0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b | 0003b8d0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003b8e0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003b8f0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003b900:·3639·3039·223e·3c74·6162·6c65·2063·6c61··6909"><table·cla | ||
| 0003b | 0003b910:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003b920:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003b930:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003b940:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003b950:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003b960:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b | 0003b970:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003b980:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b | 0003b990:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b | 0003b9a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003b9b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003b9c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b9d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b | 0003b9e0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b | 0003b9f0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b | 0003ba00:·6f64·653e·2d20·6e61·6d65·3a20·2753·6574··ode>-·name:·'Set | ||
| 0003b | 0003ba10:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| 0003b | 0003ba20:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | ||
| 0003b | 0003ba30:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | ||
| 0003b | 0003ba40:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003b | 0003ba50:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003b | 0003ba60:·616c·6c5f·636d·643a·2064·6e66·2072·6569··all_cmd:·dnf·rei | ||
| 0003b | 0003ba70:·6e73·7461·6c6c·202d·790a·2020·7768·656e··nstall·-y.··when | ||
| 0003b | 0003ba80:·3a20·616e·7369·626c·655f·6469·7374·7269··:·ansible_distri | ||
| 0003b | 0003ba90:·6275·7469·6f6e·2069·6e20·5b20·2246·6564··bution·in·[·"Fed | ||
| 0003b | 0003baa0:·6f72·6122·2c20·2252·6564·4861·7422·2c20··ora",·"RedHat",· | ||
| 0003b | 0003bab0:·2243·656e·744f·5322·2c20·224f·7261·636c··"CentOS",·"Oracl | ||
| 0003b | 0003bac0:·654c·696e·7578·2220·5d0a·2020·7461·6773··eLinux"·].··tags | ||
| 0003b | 0003bad0:·3a0a·2020·2d20·4343·452d·3839·3934·342d··:.··-·CCE-89944- | ||
| 0003b | 0003bae0:·330a·2020·2d20·434a·4953·2d35·2e31·302e··3.··-·CJIS-5.10. | ||
| 0003b7e0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | |||
| 0003b7f0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | |||
| 0003b800:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | |||
| 0003b810:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | |||
| 0003b820:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | |||
| 0003b830:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | |||
| 0003b840:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b850:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | |||
| 0003b860:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | |||
| 0003b870:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b880:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | |||
| 0003b890:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | |||
| 0003b8a0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b8b0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b8c0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | |||
| 0003b8d0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | |||
| 0003b8e0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | |||
| 0003b8f0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | |||
| 0003b900:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | |||
| Max diff block lines reached; 6266392/6308398 bytes (99.33%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:10 | 46 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 105, 14 lines modified | Offset 105, 27 lines modified | ||
| 105 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 105 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 106 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 106 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 107 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 108 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 108 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 114 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 115 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 116 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 117 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 118 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 119 | fi | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 117 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 125 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 118 | ··set_fact: | 126 | ··set_fact: |
| Offset 244, 27 lines modified | Offset 257, 14 lines modified | ||
| 244 | ··-·PCI-DSSv4-11.5.2 | 257 | ··-·PCI-DSSv4-11.5.2 |
| 245 | ··-·high_complexity | 258 | ··-·high_complexity |
| 246 | ··-·high_severity | 259 | ··-·high_severity |
| 247 | ··-·medium_disruption | 260 | ··-·medium_disruption |
| 248 | ··-·no_reboot_needed | 261 | ··-·no_reboot_needed |
| 249 | ··-·restrict_strategy | 262 | ··-·restrict_strategy |
| 250 | ··-·rpm_verify_hashes | 263 | ··-·rpm_verify_hashes |
| 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 252 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 253 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 254 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 255 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 256 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 257 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 258 | fi | ||
| 259 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 264 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 260 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 265 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 261 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 266 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 262 | run·the·following·command·to·determine·which·package·owns·it: | 267 | run·the·following·command·to·determine·which·package·owns·it: |
| 263 | $·rpm·-qf·FILENAME | 268 | $·rpm·-qf·FILENAME |
| 264 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 269 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 265 | $·sudo·rpm·--setugids·PACKAGENAME | 270 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 284, 14 lines modified | Offset 284, 40 lines modified | ||
| 284 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 284 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 285 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 285 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 286 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 286 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 287 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 287 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 288 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 288 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 289 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 289 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 290 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 290 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 296 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 297 | declare·-A·SETPERMS_RPM_DICT | ||
| 298 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 299 | #·is·expected·by·the·RPM·database | ||
| 300 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 301 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 302 | do | ||
| 303 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 304 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 305 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 306 | done | ||
| 307 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 308 | #·correct·values | ||
| 309 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 310 | do | ||
| 311 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 312 | done | ||
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 296 | -·name:·Read·list·of·files·with·incorrect·ownership | 318 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 297 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 319 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 369, 40 lines modified | Offset 395, 14 lines modified | ||
| 369 | ··-·PCI-DSSv4-11.5.2 | 395 | ··-·PCI-DSSv4-11.5.2 |
| 370 | ··-·high_complexity | 396 | ··-·high_complexity |
| 371 | ··-·high_severity | 397 | ··-·high_severity |
| 372 | ··-·medium_disruption | 398 | ··-·medium_disruption |
| 373 | ··-·no_reboot_needed | 399 | ··-·no_reboot_needed |
| 374 | ··-·restrict_strategy | 400 | ··-·restrict_strategy |
| 375 | ··-·rpm_verify_ownership | 401 | ··-·rpm_verify_ownership |
| 376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 377 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 378 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 379 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 380 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 381 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 677332/685118 bytes (98.86%) of diff not shown. | |||
| Offset 14325, 16 lines modified | Offset 14325, 16 lines modified | ||
| 00037f40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037f40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037f50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037f50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037f60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037f60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037f70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037f70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037fa0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037fa0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fb0:·2028·6173·206f·6620·3230·323 | 00037fb0:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00037fc0:·3 | 00037fc0:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 00037fd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037fd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037fe0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037fe0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037ff0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037ff0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038000:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038000:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038010:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038010:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038020:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038020:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038030:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038030:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15209, 306 lines modified | Offset 15209, 306 lines modified | ||
| 0003b680:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | 0003b680:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | ||
| 0003b690:·3038·2220·7461·6269·6e64·6578·3d22·3022··08"·tabindex="0" | 0003b690:·3038·2220·7461·6269·6e64·6578·3d22·3022··08"·tabindex="0" | ||
| 0003b6a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b6a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b6b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b6b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b6e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b6f0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b700:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b710:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b720:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b730:·6522·2069·643d·2269·646d·3639·3038·223e··e"·id="idm6908"> | |||
| 0003b740:·3c70·7265·3e3c·636f·6465·3e0a·2320·4669··<pre><code>.#·Fi | |||
| 0003b750:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | |||
| 0003b760:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | |||
| 0003b770:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | |||
| 0003b780:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | |||
| 0003b790:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | |||
| 0003b7a0:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | |||
| 0003b7b0:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | |||
| 0003b7c0:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | |||
| 0003b7d0:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | |||
| 0003b7e0:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | |||
| 0003b7f0:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | |||
| 0003b800:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | |||
| 0003b810:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | |||
| 0003b820:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | |||
| 0003b830:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b840:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | |||
| 0003b850:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | |||
| 0003b860:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | |||
| 0003b870:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | |||
| 0003b880:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | |||
| 0003b890:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | |||
| 0003b8a0:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | |||
| 0003b8b0:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | |||
| 0003b8c0:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | |||
| 0003b8d0:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | |||
| 0003b8e0:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | |||
| 0003b8f0:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | |||
| 0003b900:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | |||
| 0003b910:·2020·200a·2020·2020·646e·6620·7265·696e·····.····dnf·rein | |||
| 0003b920:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | |||
| 0003b930:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | |||
| 0003b940:·2020·2020·0a66·690a·3c2f·636f·6465·3e3c······.fi.</code>< | |||
| 0003b950:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b960:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b970:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b980:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b990:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | |||
| 0003b9a0:·3039·2220·7461·6269·6e64·6578·3d22·3022··09"·tabindex="0" | |||
| 0003b9b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b9c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b9d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b9e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b9f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b | 0003ba00:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b | 0003ba10:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b | 0003ba20:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003ba30:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003ba40:·6170·7365·2220·6964·3d22·6964·6d36·3930··apse"·id="idm690 | ||
| 0003b | 0003ba50:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | ||
| 0003b | 0003ba60:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b | 0003ba70:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b | 0003ba80:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b | 0003ba90:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b | 0003baa0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b | 0003bab0:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003b | 0003bac0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b | 0003bad0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003b | 0003bae0:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003b | 0003baf0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b | 0003bb00:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b | 0003bb10:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003bb20:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003b | 0003bb30:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003b | 0003bb40:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b | 0003bb50:·3e2d·206e·616d·653a·2027·5365·7420·6661··>-·name:·'Set·fa | ||
| 0003b | 0003bb60:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003b | 0003bb70:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003b | 0003bb80:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | ||
| 0003b | 0003bb90:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003b | 0003bba0:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003b | 0003bbb0:·5f63·6d64·3a20·646e·6620·7265·696e·7374··_cmd:·dnf·reinst | ||
| 0003b | 0003bbc0:·616c·6c20·2d79·0a20·2077·6865·6e3a·2061··all·-y.··when:·a | ||
| 0003b | 0003bbd0:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | ||
| 0003b | 0003bbe0:·696f·6e20·696e·205b·2022·4665·646f·7261··ion·in·[·"Fedora | ||
| 0003b | 0003bbf0:·222c·2022·5265·6448·6174·222c·2022·4365··",·"RedHat",·"Ce | ||
| 0003b | 0003bc00:·6e74·4f53·222c·2022·4f72·6163·6c65·4c69··ntOS",·"OracleLi | ||
| 0003b | 0003bc10:·6e75·7822·205d·0a20·2074·6167·733a·0a20··nux"·].··tags:.· | ||
| 0003b | 0003bc20:·202d·2043·4345·2d38·3939·3434·2d33·0a20···-·CCE-89944-3.· | ||
| 0003b | 0003bc30:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003b | 0003bc40:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003b | 0003bc50:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003b | 0003bc60:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003b | 0003bc70:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003b | 0003bc80:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003b | 0003bc90:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003b | 0003bca0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003b | 0003bcb0:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003b | 0003bcc0:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003b | 0003bcd0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b | 0003bce0:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003b | 0003bcf0:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003b | 0003bd00:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003b | 0003bd10:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003b | 0003bd20:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003b | 0003bd30:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003b | 0003bd40:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003b | 0003bd50:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| Max diff block lines reached; 19556352/19598496 bytes (99.78%) of diff not shown. | |||
| Offset 48, 15 lines modified | Offset 48, 15 lines modified | ||
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Health·Insurance·Portability·and·Accountability·Act | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Health·Insurance·Portability·and·Accountability·Act |
| 49 | ··············(HIPAA) | 49 | ··············(HIPAA) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:redhat:enterprise_linux:10 | 52 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 53 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 54 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 55 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 55 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 56 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 56 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 57 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 57 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 58 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 58 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 59 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 59 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 60 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 60 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 61 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 61 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 62 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 111, 14 lines modified | Offset 111, 27 lines modified | ||
| 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 131 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 124 | ··set_fact: | 132 | ··set_fact: |
| Offset 250, 27 lines modified | Offset 263, 14 lines modified | ||
| 250 | ··-·PCI-DSSv4-11.5.2 | 263 | ··-·PCI-DSSv4-11.5.2 |
| 251 | ··-·high_complexity | 264 | ··-·high_complexity |
| 252 | ··-·high_severity | 265 | ··-·high_severity |
| 253 | ··-·medium_disruption | 266 | ··-·medium_disruption |
| 254 | ··-·no_reboot_needed | 267 | ··-·no_reboot_needed |
| 255 | ··-·restrict_strategy | 268 | ··-·restrict_strategy |
| 256 | ··-·rpm_verify_hashes | 269 | ··-·rpm_verify_hashes |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 258 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 259 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 260 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 261 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 262 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 263 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 264 | fi | ||
| 265 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 266 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 271 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 267 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 272 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 268 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 273 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 269 | $·rpm·-qf·FILENAME | 274 | $·rpm·-qf·FILENAME |
| 270 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 292, 14 lines modified | Offset 292, 44 lines modified | ||
| 292 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 292 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 293 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 293 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 294 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 294 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 295 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 295 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 297 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 297 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 299 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 300 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 301 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 302 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 303 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 304 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 305 | declare·-A·SETPERMS_RPM_DICT | ||
| 306 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 307 | #·is·expected·by·the·RPM·database | ||
| 308 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 309 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 310 | do | ||
| 311 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 312 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 313 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 314 | ········do | ||
| 315 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 316 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 317 | ········done | ||
| 318 | done | ||
| 319 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 320 | #·correct·values | ||
| 321 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 322 | do | ||
| 323 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 324 | done | ||
| 299 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 300 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 301 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 302 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 303 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 304 | -·name:·Read·list·of·files·with·incorrect·permissions | 330 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 305 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 331 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 380, 44 lines modified | Offset 410, 14 lines modified | ||
| 380 | ··-·PCI-DSSv4-11.5.2 | 410 | ··-·PCI-DSSv4-11.5.2 |
| 381 | ··-·high_complexity | 411 | ··-·high_complexity |
| 382 | ··-·high_severity | 412 | ··-·high_severity |
| 383 | ··-·medium_disruption | 413 | ··-·medium_disruption |
| 384 | ··-·no_reboot_needed | 414 | ··-·no_reboot_needed |
| 385 | ··-·restrict_strategy | 415 | ··-·restrict_strategy |
| 386 | ··-·rpm_verify_permissions | 416 | ··-·rpm_verify_permissions |
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1578449/1586681 bytes (99.48%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e80:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e90:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e90:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037ea0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037ea0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037eb0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037eb0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037ec0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037ec0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ed0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ed0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ef0:·2028·6173·206f·6620·3230·323 | 00037ef0:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00037f00:·3 | 00037f00:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 00037f10:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f10:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f20:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f20:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f30:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f30:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f40:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f40:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f50:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f50:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f60:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f60:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f70:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f70:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15232, 306 lines modified | Offset 15232, 306 lines modified | ||
| 0003b7f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b7f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b800:·646d·3639·3038·2220·7461·6269·6e64·6578··dm6908"·tabindex | 0003b800:·646d·3639·3038·2220·7461·6269·6e64·6578··dm6908"·tabindex | ||
| 0003b810:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b810:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b820:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b820:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b830:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b830:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b840:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b840:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b850:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b850:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b860:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b870:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b880:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b890:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b8a0:·6c61·7073·6522·2069·643d·2269·646d·3639··lapse"·id="idm69 | |||
| 0003b8b0:·3038·223e·3c70·7265·3e3c·636f·6465·3e0a··08"><pre><code>. | |||
| 0003b8c0:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | |||
| 0003b8d0:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | |||
| 0003b8e0:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | |||
| 0003b8f0:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | |||
| 0003b900:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | |||
| 0003b910:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | |||
| 0003b920:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | |||
| 0003b930:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | |||
| 0003b940:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003b950:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | |||
| 0003b960:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | |||
| 0003b970:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | |||
| 0003b980:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | |||
| 0003b990:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | |||
| 0003b9a0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b9b0:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | |||
| 0003b9c0:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | |||
| 0003b9d0:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | |||
| 0003b9e0:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | |||
| 0003b9f0:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | |||
| 0003ba00:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | |||
| 0003ba10:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | |||
| 0003ba20:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | |||
| 0003ba30:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | |||
| 0003ba40:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | |||
| 0003ba50:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | |||
| 0003ba60:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003ba70:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | |||
| 0003ba80:·220a·0a20·2020·200a·2020·2020·646e·6620··"..····.····dnf· | |||
| 0003ba90:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | |||
| 0003baa0:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | |||
| 0003bab0:·616c·6c0a·2020·2020·0a66·690a·3c2f·636f··all.····.fi.</co | |||
| 0003bac0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bad0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bae0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003baf0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bb00:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bb10:·646d·3639·3039·2220·7461·6269·6e64·6578··dm6909"·tabindex | |||
| 0003bb20:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bb30:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bb40:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bb50:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bb60:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b | 0003bb70:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b | 0003bb80:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b | 0003bb90:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003bba0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003bbb0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003bbc0:·6d36·3930·3922·3e3c·7461·626c·6520·636c··m6909"><table·cl | ||
| 0003b | 0003bbd0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003bbe0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003bbf0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003bc00:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003bc10:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003bc20:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b | 0003bc30:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003bc40:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b | 0003bc50:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b | 0003bc60:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003bc70:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b | 0003bc80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003bc90:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b | 0003bca0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b | 0003bcb0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b | 0003bcc0:·636f·6465·3e2d·206e·616d·653a·2027·5365··code>-·name:·'Se | ||
| 0003b | 0003bcd0:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003b | 0003bce0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003b | 0003bcf0:·6c20·636f·6d6d·616e·6427·0a20·2073·6574··l·command'.··set | ||
| 0003b | 0003bd00:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003b | 0003bd10:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003b | 0003bd20:·7461·6c6c·5f63·6d64·3a20·646e·6620·7265··tall_cmd:·dnf·re | ||
| 0003b | 0003bd30:·696e·7374·616c·6c20·2d79·0a20·2077·6865··install·-y.··whe | ||
| 0003b | 0003bd40:·6e3a·2061·6e73·6962·6c65·5f64·6973·7472··n:·ansible_distr | ||
| 0003b | 0003bd50:·6962·7574·696f·6e20·696e·205b·2022·4665··ibution·in·[·"Fe | ||
| 0003b | 0003bd60:·646f·7261·222c·2022·5265·6448·6174·222c··dora",·"RedHat", | ||
| 0003b | 0003bd70:·2022·4365·6e74·4f53·222c·2022·4f72·6163···"CentOS",·"Orac | ||
| 0003b | 0003bd80:·6c65·4c69·6e75·7822·205d·0a20·2074·6167··leLinux"·].··tag | ||
| 0003b | 0003bd90:·733a·0a20·202d·2043·4345·2d38·3939·3434··s:.··-·CCE-89944 | ||
| 0003b | 0003bda0:·2d33·0a20·202d·2043·4a49·532d·352e·3130··-3.··-·CJIS-5.10 | ||
| 0003baa0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | |||
| 0003bab0:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | |||
| 0003bac0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | |||
| 0003bad0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | |||
| 0003bae0:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003baf0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bb00:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | |||
| 0003bb10:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | |||
| 0003bb20:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | |||
| 0003bb30:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bb40:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | |||
| 0003bb50:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | |||
| 0003bb60:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003bb70:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003bb80:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | |||
| 0003bb90:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | |||
| 0003bba0:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| 0003bbb0:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | |||
| Max diff block lines reached; 10832835/10874979 bytes (99.61%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 46 | ··············Base | 46 | ··············Base |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:10 | 49 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 115, 14 lines modified | Offset 115, 27 lines modified | ||
| 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 124 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 125 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 126 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 127 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 128 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 129 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 127 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 135 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 128 | ··set_fact: | 136 | ··set_fact: |
| Offset 254, 27 lines modified | Offset 267, 14 lines modified | ||
| 254 | ··-·PCI-DSSv4-11.5.2 | 267 | ··-·PCI-DSSv4-11.5.2 |
| 255 | ··-·high_complexity | 268 | ··-·high_complexity |
| 256 | ··-·high_severity | 269 | ··-·high_severity |
| 257 | ··-·medium_disruption | 270 | ··-·medium_disruption |
| 258 | ··-·no_reboot_needed | 271 | ··-·no_reboot_needed |
| 259 | ··-·restrict_strategy | 272 | ··-·restrict_strategy |
| 260 | ··-·rpm_verify_hashes | 273 | ··-·rpm_verify_hashes |
| 261 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 262 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 263 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 264 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 265 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 266 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 267 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 268 | fi | ||
| 269 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 274 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 270 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 275 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 271 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 276 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 272 | run·the·following·command·to·determine·which·package·owns·it: | 277 | run·the·following·command·to·determine·which·package·owns·it: |
| 273 | $·rpm·-qf·FILENAME | 278 | $·rpm·-qf·FILENAME |
| 274 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 279 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 275 | $·sudo·rpm·--setugids·PACKAGENAME | 280 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 294, 14 lines modified | Offset 294, 40 lines modified | ||
| 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 306 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 307 | declare·-A·SETPERMS_RPM_DICT | ||
| 308 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 309 | #·is·expected·by·the·RPM·database | ||
| 310 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 311 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 312 | do | ||
| 313 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 314 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 315 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 316 | done | ||
| 317 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 318 | #·correct·values | ||
| 319 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 320 | do | ||
| 321 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 322 | done | ||
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 306 | -·name:·Read·list·of·files·with·incorrect·ownership | 328 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 329 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 379, 40 lines modified | Offset 405, 14 lines modified | ||
| 379 | ··-·PCI-DSSv4-11.5.2 | 405 | ··-·PCI-DSSv4-11.5.2 |
| 380 | ··-·high_complexity | 406 | ··-·high_complexity |
| 381 | ··-·high_severity | 407 | ··-·high_severity |
| 382 | ··-·medium_disruption | 408 | ··-·medium_disruption |
| 383 | ··-·no_reboot_needed | 409 | ··-·no_reboot_needed |
| 384 | ··-·restrict_strategy | 410 | ··-·restrict_strategy |
| 385 | ··-·rpm_verify_ownership | 411 | ··-·rpm_verify_ownership |
| 386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 387 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 388 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 389 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 390 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 391 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1180697/1188412 bytes (99.35%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2861·7320·6f66·2032·3032·3 | 00037f30:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00037f40:·3 | 00037f40:·3129·0a20·2020·2020·2020·2020·2020·2020··1).············· | ||
| 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15236, 306 lines modified | Offset 15236, 306 lines modified | ||
| 0003b830:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b830:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b840:·6d36·3930·3822·2074·6162·696e·6465·783d··m6908"·tabindex= | 0003b840:·6d36·3930·3822·2074·6162·696e·6465·783d··m6908"·tabindex= | ||
| 0003b850:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b850:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b860:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b860:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b870:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b870:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b880:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b880:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b890:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b890:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b8a0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b8b0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b8c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b8d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b8e0:·6170·7365·2220·6964·3d22·6964·6d36·3930··apse"·id="idm690 | |||
| 0003b8f0:·3822·3e3c·7072·653e·3c63·6f64·653e·0a23··8"><pre><code>.# | |||
| 0003b900:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | |||
| 0003b910:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | |||
| 0003b920:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | |||
| 0003b930:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | |||
| 0003b940:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | |||
| 0003b950:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | |||
| 0003b960:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | |||
| 0003b970:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | |||
| 0003b980:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b990:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | |||
| 0003b9a0:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | |||
| 0003b9b0:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | |||
| 0003b9c0:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | |||
| 0003b9d0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | |||
| 0003b9e0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b9f0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | |||
| 0003ba00:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | |||
| 0003ba10:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | |||
| 0003ba20:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | |||
| 0003ba30:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | |||
| 0003ba40:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | |||
| 0003ba50:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | |||
| 0003ba60:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | |||
| 0003ba70:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | |||
| 0003ba80:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | |||
| 0003ba90:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | |||
| 0003baa0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003bab0:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | |||
| 0003bac0:·0a0a·2020·2020·0a20·2020·2064·6e66·2072··..····.····dnf·r | |||
| 0003bad0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | |||
| 0003bae0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003baf0:·6c6c·0a20·2020·200a·6669·0a3c·2f63·6f64··ll.····.fi.</cod | |||
| 0003bb00:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bb10:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bb20:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003bb30:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bb40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bb50:·6d36·3930·3922·2074·6162·696e·6465·783d··m6909"·tabindex= | |||
| 0003bb60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bb70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bb80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bb90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bba0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003bbb0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b | 0003bbc0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b | 0003bbd0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003bbe0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003bbf0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003bc00:·3639·3039·223e·3c74·6162·6c65·2063·6c61··6909"><table·cla | ||
| 0003b | 0003bc10:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003bc20:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003bc30:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003bc40:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003bc50:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003bc60:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b | 0003bc70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003bc80:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b | 0003bc90:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b | 0003bca0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003bcb0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003bcc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003bcd0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b | 0003bce0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b | 0003bcf0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b | 0003bd00:·6f64·653e·2d20·6e61·6d65·3a20·2753·6574··ode>-·name:·'Set | ||
| 0003b | 0003bd10:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| 0003b | 0003bd20:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | ||
| 0003b | 0003bd30:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | ||
| 0003b | 0003bd40:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003b | 0003bd50:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003b | 0003bd60:·616c·6c5f·636d·643a·2064·6e66·2072·6569··all_cmd:·dnf·rei | ||
| 0003b | 0003bd70:·6e73·7461·6c6c·202d·790a·2020·7768·656e··nstall·-y.··when | ||
| 0003b | 0003bd80:·3a20·616e·7369·626c·655f·6469·7374·7269··:·ansible_distri | ||
| 0003b | 0003bd90:·6275·7469·6f6e·2069·6e20·5b20·2246·6564··bution·in·[·"Fed | ||
| 0003b | 0003bda0:·6f72·6122·2c20·2252·6564·4861·7422·2c20··ora",·"RedHat",· | ||
| 0003b | 0003bdb0:·2243·656e·744f·5322·2c20·224f·7261·636c··"CentOS",·"Oracl | ||
| 0003b | 0003bdc0:·654c·696e·7578·2220·5d0a·2020·7461·6773··eLinux"·].··tags | ||
| 0003b | 0003bdd0:·3a0a·2020·2d20·4343·452d·3839·3934·342d··:.··-·CCE-89944- | ||
| 0003b | 0003bde0:·330a·2020·2d20·434a·4953·2d35·2e31·302e··3.··-·CJIS-5.10. | ||
| 0003bae0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | |||
| 0003baf0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | |||
| 0003bb00:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | |||
| 0003bb10:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | |||
| 0003bb20:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | |||
| 0003bb30:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | |||
| 0003bb40:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003bb50:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | |||
| 0003bb60:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | |||
| 0003bb70:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003bb80:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | |||
| 0003bb90:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | |||
| 0003bba0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003bbb0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003bbc0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | |||
| 0003bbd0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | |||
| 0003bbe0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | |||
| 0003bbf0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | |||
| Max diff block lines reached; 10832766/10874910 bytes (99.61%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 47 | ··············Secret | 47 | ··············Secret |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 116, 14 lines modified | Offset 116, 27 lines modified | ||
| 116 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 116 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 117 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 117 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 125 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 126 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 127 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 128 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 129 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 130 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 128 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 136 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 129 | ··set_fact: | 137 | ··set_fact: |
| Offset 255, 27 lines modified | Offset 268, 14 lines modified | ||
| 255 | ··-·PCI-DSSv4-11.5.2 | 268 | ··-·PCI-DSSv4-11.5.2 |
| 256 | ··-·high_complexity | 269 | ··-·high_complexity |
| 257 | ··-·high_severity | 270 | ··-·high_severity |
| 258 | ··-·medium_disruption | 271 | ··-·medium_disruption |
| 259 | ··-·no_reboot_needed | 272 | ··-·no_reboot_needed |
| 260 | ··-·restrict_strategy | 273 | ··-·restrict_strategy |
| 261 | ··-·rpm_verify_hashes | 274 | ··-·rpm_verify_hashes |
| 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 263 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 264 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 265 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 266 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 267 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 268 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 269 | fi | ||
| 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 275 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 271 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 276 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 272 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 277 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 273 | run·the·following·command·to·determine·which·package·owns·it: | 278 | run·the·following·command·to·determine·which·package·owns·it: |
| 274 | $·rpm·-qf·FILENAME | 279 | $·rpm·-qf·FILENAME |
| 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 280 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 276 | $·sudo·rpm·--setugids·PACKAGENAME | 281 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 295, 14 lines modified | Offset 295, 40 lines modified | ||
| 295 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 295 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 296 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 296 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 297 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 297 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 298 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 298 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 299 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 299 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 300 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 300 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 301 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 301 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 307 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 308 | declare·-A·SETPERMS_RPM_DICT | ||
| 309 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 310 | #·is·expected·by·the·RPM·database | ||
| 311 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 312 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 313 | do | ||
| 314 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 315 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 316 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 317 | done | ||
| 318 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 319 | #·correct·values | ||
| 320 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 321 | do | ||
| 322 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 323 | done | ||
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 325 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 326 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 327 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 328 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 307 | -·name:·Read·list·of·files·with·incorrect·ownership | 329 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 308 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 330 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 380, 40 lines modified | Offset 406, 14 lines modified | ||
| 380 | ··-·PCI-DSSv4-11.5.2 | 406 | ··-·PCI-DSSv4-11.5.2 |
| 381 | ··-·high_complexity | 407 | ··-·high_complexity |
| 382 | ··-·high_severity | 408 | ··-·high_severity |
| 383 | ··-·medium_disruption | 409 | ··-·medium_disruption |
| 384 | ··-·no_reboot_needed | 410 | ··-·no_reboot_needed |
| 385 | ··-·restrict_strategy | 411 | ··-·restrict_strategy |
| 386 | ··-·rpm_verify_ownership | 412 | ··-·rpm_verify_ownership |
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 392 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1180697/1188421 bytes (99.35%) of diff not shown. | |||
| Offset 14315, 15 lines modified | Offset 14315, 15 lines modified | ||
| 00037ea0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037ea0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037eb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037eb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037ec0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037ec0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037ed0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037ed0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037ee0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037ee0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037ef0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037ef0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037f00:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037f00:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037f10:·3032·3 | 00037f10:·3032·352d·3132·2d31·3129·0a20·2020·2020··025-12-11).····· | ||
| 00037f20:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037f20:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037f30:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037f30:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037f40:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037f40:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037f50:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037f50:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037f60:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037f60:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037f70:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037f70:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037f80:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037f80:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15234, 305 lines modified | Offset 15234, 305 lines modified | ||
| 0003b810:·6765·743d·2223·6964·6d36·3930·3822·2074··get="#idm6908"·t | 0003b810:·6765·743d·2223·6964·6d36·3930·3822·2074··get="#idm6908"·t | ||
| 0003b820:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b820:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b830:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b830:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b840:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b840:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b850:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b850:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b860:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b860:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b870:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b870:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b880:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b890:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b8a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b8b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b8c0:·3d22·6964·6d36·3930·3822·3e3c·7072·653e··="idm6908"><pre> | |||
| 0003b8d0:·3c63·6f64·653e·0a23·2046·696e·6420·7768··<code>.#·Find·wh | |||
| 0003b8e0:·6963·6820·6669·6c65·7320·6861·7665·2069··ich·files·have·i | |||
| 0003b8f0:·6e63·6f72·7265·6374·2068·6173·6820·286e··ncorrect·hash·(n | |||
| 0003b900:·6f74·2069·6e20·2f65·7463·2c20·6265·6361··ot·in·/etc,·beca | |||
| 0003b910:·7573·6520·6f66·2074·6865·2073·7973·7465··use·of·the·syste | |||
| 0003b920:·6d20·7265·6c61·7465·6420·636f·6e66·6967··m·related·config | |||
| 0003b930:·2066·696c·6573·2920·616e·6420·7468·656e···files)·and·then | |||
| 0003b940:·2067·6574·2066·696c·6573·206e·616d·6573···get·files·names | |||
| 0003b950:·0a66·696c·6573·5f77·6974·685f·696e·636f··.files_with_inco | |||
| 0003b960:·7272·6563·745f·6861·7368·3d22·2428·7270··rrect_hash="$(rp | |||
| 0003b970:·6d20·2d56·6120·2d2d·6e6f·636f·6e66·6967··m·-Va·--noconfig | |||
| 0003b980:·207c·2067·7265·7020·2d45·2027·5e2e·2e35···|·grep·-E·'^..5 | |||
| 0003b990:·2720·7c20·6177·6b20·277b·7072·696e·7420··'·|·awk·'{print· | |||
| 0003b9a0:·244e·467d·2720·2922·0a0a·6966·205b·202d··$NF}'·)"..if·[·- | |||
| 0003b9b0:·6e20·2224·6669·6c65·735f·7769·7468·5f69··n·"$files_with_i | |||
| 0003b9c0:·6e63·6f72·7265·6374·5f68·6173·6822·205d··ncorrect_hash"·] | |||
| 0003b9d0:·3b20·7468·656e·0a20·2020·2023·2046·726f··;·then.····#·Fro | |||
| 0003b9e0:·6d20·6669·6c65·7320·6e61·6d65·7320·6765··m·files·names·ge | |||
| 0003b9f0:·7420·7061·636b·6167·6520·6e61·6d65·7320··t·package·names· | |||
| 0003ba00:·616e·6420·6368·616e·6765·206e·6577·6c69··and·change·newli | |||
| 0003ba10:·6e65·2074·6f20·7370·6163·652c·2062·6563··ne·to·space,·bec | |||
| 0003ba20:·6175·7365·2072·706d·2077·7269·7465·7320··ause·rpm·writes· | |||
| 0003ba30:·6561·6368·2070·6163·6b61·6765·2074·6f20··each·package·to· | |||
| 0003ba40:·6e65·7720·6c69·6e65·0a20·2020·2070·6163··new·line.····pac | |||
| 0003ba50:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003ba60:·6c6c·3d22·2428·7270·6d20·2d71·6620·2466··ll="$(rpm·-qf·$f | |||
| 0003ba70:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003ba80:·6563·745f·6861·7368·207c·2074·7220·275c··ect_hash·|·tr·'\ | |||
| 0003ba90:·6e27·2027·2027·2922·0a0a·2020·2020·0a20··n'·'·')"..····.· | |||
| 0003baa0:·2020·2064·6e66·2072·6569·6e73·7461·6c6c·····dnf·reinstall | |||
| 0003bab0:·202d·7920·2470·6163·6b61·6765·735f·746f···-y·$packages_to | |||
| 0003bac0:·5f72·6569·6e73·7461·6c6c·0a20·2020·200a··_reinstall.····. | |||
| 0003bad0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003bae0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003baf0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bb00:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bb10:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bb20:·6765·743d·2223·6964·6d36·3930·3922·2074··get="#idm6909"·t | |||
| 0003bb30:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bb40:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bb50:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bb60:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bb70:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bb80:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b | 0003bb90:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b | 0003bba0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003bbb0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003bbc0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003bbd0:·2069·643d·2269·646d·3639·3039·223e·3c74···id="idm6909"><t | ||
| 0003b | 0003bbe0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003bbf0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003bc00:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003bc10:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003bc20:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b | 0003bc30:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003b | 0003bc40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003bc50:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b | 0003bc60:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003b | 0003bc70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003bc80:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003bc90:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003bca0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003bcb0:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003b | 0003bcc0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b | 0003bcd0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003b | 0003bce0:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | ||
| 0003b | 0003bcf0:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | ||
| 0003b | 0003bd00:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | ||
| 0003b | 0003bd10:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003b | 0003bd20:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003b | 0003bd30:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003b | 0003bd40:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003b | 0003bd50:·790a·2020·7768·656e·3a20·616e·7369·626c··y.··when:·ansibl | ||
| 0003b | 0003bd60:·655f·6469·7374·7269·6275·7469·6f6e·2069··e_distribution·i | ||
| 0003b | 0003bd70:·6e20·5b20·2246·6564·6f72·6122·2c20·2252··n·[·"Fedora",·"R | ||
| 0003b | 0003bd80:·6564·4861·7422·2c20·2243·656e·744f·5322··edHat",·"CentOS" | ||
| 0003b | 0003bd90:·2c20·224f·7261·636c·654c·696e·7578·2220··,·"OracleLinux"· | ||
| 0003b | 0003bda0:·5d0a·2020·7461·6773·3a0a·2020·2d20·4343··].··tags:.··-·CC | ||
| 0003b | 0003bdb0:·452d·3839·3934·342d·330a·2020·2d20·434a··E-89944-3.··-·CJ | ||
| 0003b | 0003bdc0:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003b | 0003bdd0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003b | 0003bde0:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003b | 0003bdf0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003b | 0003be00:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003b | 0003be10:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003be20:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003b | 0003be30:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003b | 0003be40:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003be50:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003b | 0003be60:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003b | 0003be70:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b | 0003be80:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003b | 0003be90:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003b | 0003bea0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003b | 0003beb0:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003b | 0003bec0:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003b | 0003bed0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003b | 0003bee0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003b | 0003bef0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| Max diff block lines reached; 10833111/10874979 bytes (99.62%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 46 | ··············Top·Secret | 46 | ··············Top·Secret |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:10 | 49 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 115, 14 lines modified | Offset 115, 27 lines modified | ||
| 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 124 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 125 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 126 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 127 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 128 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 129 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 127 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 135 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 128 | ··set_fact: | 136 | ··set_fact: |
| Offset 254, 27 lines modified | Offset 267, 14 lines modified | ||
| 254 | ··-·PCI-DSSv4-11.5.2 | 267 | ··-·PCI-DSSv4-11.5.2 |
| 255 | ··-·high_complexity | 268 | ··-·high_complexity |
| 256 | ··-·high_severity | 269 | ··-·high_severity |
| 257 | ··-·medium_disruption | 270 | ··-·medium_disruption |
| 258 | ··-·no_reboot_needed | 271 | ··-·no_reboot_needed |
| 259 | ··-·restrict_strategy | 272 | ··-·restrict_strategy |
| 260 | ··-·rpm_verify_hashes | 273 | ··-·rpm_verify_hashes |
| 261 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 262 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 263 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 264 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 265 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 266 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 267 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 268 | fi | ||
| 269 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 274 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 270 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 275 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 271 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 276 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 272 | run·the·following·command·to·determine·which·package·owns·it: | 277 | run·the·following·command·to·determine·which·package·owns·it: |
| 273 | $·rpm·-qf·FILENAME | 278 | $·rpm·-qf·FILENAME |
| 274 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 279 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 275 | $·sudo·rpm·--setugids·PACKAGENAME | 280 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 294, 14 lines modified | Offset 294, 40 lines modified | ||
| 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 306 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 307 | declare·-A·SETPERMS_RPM_DICT | ||
| 308 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 309 | #·is·expected·by·the·RPM·database | ||
| 310 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 311 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 312 | do | ||
| 313 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 314 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 315 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 316 | done | ||
| 317 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 318 | #·correct·values | ||
| 319 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 320 | do | ||
| 321 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 322 | done | ||
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 306 | -·name:·Read·list·of·files·with·incorrect·ownership | 328 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 329 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 379, 40 lines modified | Offset 405, 14 lines modified | ||
| 379 | ··-·PCI-DSSv4-11.5.2 | 405 | ··-·PCI-DSSv4-11.5.2 |
| 380 | ··-·high_complexity | 406 | ··-·high_complexity |
| 381 | ··-·high_severity | 407 | ··-·high_severity |
| 382 | ··-·medium_disruption | 408 | ··-·medium_disruption |
| 383 | ··-·no_reboot_needed | 409 | ··-·no_reboot_needed |
| 384 | ··-·restrict_strategy | 410 | ··-·restrict_strategy |
| 385 | ··-·rpm_verify_ownership | 411 | ··-·rpm_verify_ownership |
| 386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 387 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 388 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 389 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 390 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 391 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1180697/1188429 bytes (99.35%) of diff not shown. | |||
| Offset 14307, 15 lines modified | Offset 14307, 15 lines modified | ||
| 00037e20:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037e20:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037e30:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037e30:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037e40:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037e40:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037e50:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037e50:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037e60:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037e60:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037e70:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037e70:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037e80:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037e80:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e90:·6f66·2032·3032·3 | 00037e90:·6f66·2032·3032·352d·3132·2d31·3129·0a20··of·2025-12-11).· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037ea0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037eb0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037eb0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037ec0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037ec0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037ed0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037ed0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037ee0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037ee0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037ef0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037ef0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037f00:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037f00:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15215, 306 lines modified | Offset 15215, 306 lines modified | ||
| 0003b6e0:·7461·7267·6574·3d22·2369·646d·3639·3038··target="#idm6908 | 0003b6e0:·7461·7267·6574·3d22·2369·646d·3639·3038··target="#idm6908 | ||
| 0003b6f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b6f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b700:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b700:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b710:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b710:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b720:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b720:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b730:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b730:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b740:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b740:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b750:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b760:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b770:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b780:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b790:·2069·643d·2269·646d·3639·3038·223e·3c70···id="idm6908"><p | |||
| 0003b7a0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003b7b0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003b7c0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003b7d0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003b7e0:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003b7f0:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003b800:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003b810:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003b820:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003b830:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003b840:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003b850:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003b860:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003b870:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003b880:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003b890:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b8a0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003b8b0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003b8c0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003b8d0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003b8e0:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003b8f0:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003b900:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003b910:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003b920:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003b930:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003b940:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003b950:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003b960:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003b970:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | |||
| 0003b980:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003b990:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003b9a0:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003b9b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b9c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b9d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b9e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b9f0:·7461·7267·6574·3d22·2369·646d·3639·3039··target="#idm6909 | |||
| 0003ba00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ba10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ba20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ba30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ba40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ba50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003ba60:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003b | 0003ba70:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b | 0003ba80:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003ba90:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003baa0:·7365·2220·6964·3d22·6964·6d36·3930·3922··se"·id="idm6909" | ||
| 0003b | 0003bab0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003bac0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003bad0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003bae0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003baf0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003bb00:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003b | 0003bb10:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003b | 0003bb20:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003bb30:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003b | 0003bb40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bb50:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003bb60:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003bb70:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003bb80:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b | 0003bb90:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b | 0003bba0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b | 0003bbb0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003b | 0003bbc0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003b | 0003bbd0:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003b | 0003bbe0:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003b | 0003bbf0:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003b | 0003bc00:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003b | 0003bc10:·6d64·3a20·646e·6620·7265·696e·7374·616c··md:·dnf·reinstal | ||
| 0003b | 0003bc20:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003b | 0003bc30:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003b | 0003bc40:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003b | 0003bc50:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003b | 0003bc60:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003b | 0003bc70:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003b | 0003bc80:·2043·4345·2d38·3939·3434·2d33·0a20·202d···CCE-89944-3.··- | ||
| 0003b | 0003bc90:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003b | 0003bca0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003bcb0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003b | 0003bcc0:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003b | 0003bcd0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003b | 0003bce0:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003b | 0003bcf0:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003b | 0003bd00:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b | 0003bd10:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003b | 0003bd20:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003b | 0003bd30:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003b | 0003bd40:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003bd50:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003b | 0003bd60:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003b | 0003bd70:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003b | 0003bd80:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003b | 0003bd90:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003b | 0003bda0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003b | 0003bdb0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003b | 0003bdc0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| Max diff block lines reached; 15889286/15931292 bytes (99.74%) of diff not shown. | |||
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise |
| 45 | ··············Linux·10 | 45 | ··············Linux·10 |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux:10 | 48 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 112, 14 lines modified | Offset 112, 27 lines modified | ||
| 112 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 112 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 113 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 113 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 114 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 114 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 115 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 115 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 121 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 122 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 123 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 124 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 125 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 126 | fi | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 124 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 132 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 125 | ··set_fact: | 133 | ··set_fact: |
| Offset 251, 27 lines modified | Offset 264, 14 lines modified | ||
| 251 | ··-·PCI-DSSv4-11.5.2 | 264 | ··-·PCI-DSSv4-11.5.2 |
| 252 | ··-·high_complexity | 265 | ··-·high_complexity |
| 253 | ··-·high_severity | 266 | ··-·high_severity |
| 254 | ··-·medium_disruption | 267 | ··-·medium_disruption |
| 255 | ··-·no_reboot_needed | 268 | ··-·no_reboot_needed |
| 256 | ··-·restrict_strategy | 269 | ··-·restrict_strategy |
| 257 | ··-·rpm_verify_hashes | 270 | ··-·rpm_verify_hashes |
| 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 259 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 260 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 261 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 262 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 263 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 264 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 265 | fi | ||
| 266 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 271 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 267 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 272 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 268 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 273 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 269 | run·the·following·command·to·determine·which·package·owns·it: | 274 | run·the·following·command·to·determine·which·package·owns·it: |
| 270 | $·rpm·-qf·FILENAME | 275 | $·rpm·-qf·FILENAME |
| 271 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 276 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 272 | $·sudo·rpm·--setugids·PACKAGENAME | 277 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 291, 14 lines modified | Offset 291, 40 lines modified | ||
| 291 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 291 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 292 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 292 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 293 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 293 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 294 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 294 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 295 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 295 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 296 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 296 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 297 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 297 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 303 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 304 | declare·-A·SETPERMS_RPM_DICT | ||
| 305 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 306 | #·is·expected·by·the·RPM·database | ||
| 307 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 308 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 309 | do | ||
| 310 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 311 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 312 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 313 | done | ||
| 314 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 315 | #·correct·values | ||
| 316 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 317 | do | ||
| 318 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 319 | done | ||
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 303 | -·name:·Read·list·of·files·with·incorrect·ownership | 325 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 304 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 326 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 376, 40 lines modified | Offset 402, 14 lines modified | ||
| 376 | ··-·PCI-DSSv4-11.5.2 | 402 | ··-·PCI-DSSv4-11.5.2 |
| 377 | ··-·high_complexity | 403 | ··-·high_complexity |
| 378 | ··-·high_severity | 404 | ··-·high_severity |
| 379 | ··-·medium_disruption | 405 | ··-·medium_disruption |
| 380 | ··-·no_reboot_needed | 406 | ··-·no_reboot_needed |
| 381 | ··-·restrict_strategy | 407 | ··-·restrict_strategy |
| 382 | ··-·rpm_verify_ownership | 408 | ··-·rpm_verify_ownership |
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 384 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 385 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 386 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 387 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 388 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1582945/1590677 bytes (99.51%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00037e50:·3 | 00037e50:·3129·0a20·2020·2020·2020·2020·2020·2020··1).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15130, 234 lines modified | Offset 15130, 234 lines modified | ||
| 0003b190:·7267·6574·3d22·2369·646d·3732·3530·2220··rget="#idm7250"· | 0003b190:·7267·6574·3d22·2369·646d·3732·3530·2220··rget="#idm7250"· | ||
| 0003b1a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b1a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b1b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b1b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b1c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b1c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b1d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b1d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b1e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b1e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b1f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b1f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b200:·6e20· | 0003b200:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | ||
| 0003b210:· | 0003b210:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b220:· | 0003b220:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b230:·6 | 0003b230:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b240:· | 0003b240:·2069·643d·2269·646d·3732·3530·223e·3c74···id="idm7250"><t | ||
| 0003b250:· | 0003b250:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b260:·6 | 0003b260:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b270:· | 0003b270:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b280:· | 0003b280:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b290:· | 0003b290:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b2a0:·7 | 0003b2a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b2b0:· | 0003b2b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b2c0:· | 0003b2c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b2d0:· | 0003b2d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b2e0:· | 0003b2e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b2f0:· | 0003b2f0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b300:· | 0003b300:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b310:· | 0003b310:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b320:· | 0003b320:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | ||
| 0003b330:· | 0003b330:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b340:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003b3 | 0003b340:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | ||
| 0003b350:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b360:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b370:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b380:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b390:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b3a0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b3b0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b3c0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b3d0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b3e0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b3f0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b400:·3235·3122·2074·6162·696e·6465·783d·2230··251"·tabindex="0 | |||
| 0003b410:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b420:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b430:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b440:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b450:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b460:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b470:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b480:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b490:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b4a0:·7365·2220·6964·3d22·6964·6d37·3235·3122··se"·id="idm7251" | |||
| 0003b4b0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b4c0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b4d0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b4e0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b4f0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b500:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b510:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b520:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b530:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b540:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b550:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b560:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b570:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b580:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b590:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b5a0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b5b0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b5c0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b5d0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b5e0:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003b5f0:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003b600:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003b610:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003b620:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003b630:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003b640:·3b20·7468·656e·0a20·2020·2064·6e66·2069··;·then.····dnf·i | |||
| 0003b650:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b660:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003b670:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b680:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b690:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b6a0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b6b0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003b6c0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b6d0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b6e0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b6f0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b700:·6765·743d·2223·6964·6d37·3235·3222·2074··get="#idm7252"·t | |||
| 0003b710:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b720:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b730:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b740:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b750:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b760:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b770:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b780:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b790:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b7a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b7b0:·2069·643d·2269·646d·3732·3532·223e·3c74···id="idm7252"><t | |||
| 0003b7c0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b7d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b7e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b7f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b800:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b810:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b820:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b830:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b840:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b850:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| Max diff block lines reached; 32888328/32920536 bytes (99.90%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037e50:·313 | 00037e50:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15130, 234 lines modified | Offset 15130, 234 lines modified | ||
| 0003b190:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003b190:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b1a0:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b1a0:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b1b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b1b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b1c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b1c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b1d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b1d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b1e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b1e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b200:·6174·696f·6e20· | 0003b200:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | ||
| 0003b210:· | 0003b210:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b220:· | 0003b220:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b230:·6 | 0003b230:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b240:· | 0003b240:·7073·6522·2069·643d·2269·646d·3732·3530··pse"·id="idm7250 | ||
| 0003b250:· | 0003b250:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b260:· | 0003b260:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b270:·7 | 0003b270:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b280:·65 | 0003b280:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b290:·6 | 0003b290:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b2a0:·6 | 0003b2a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b2b0:·6 | 0003b2b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b2c0:· | 0003b2c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b2d0:· | 0003b2d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b2e0:· | 0003b2e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b2f0:· | 0003b2f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b300:·6 | 0003b300:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b310:· | 0003b310:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b320:· | 0003b320:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b330:· | 0003b330:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b340:· | 0003b340:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | ||
| 0003b350:·6 | 0003b350:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | ||
| 0003b360:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b370:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b380:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b390:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b3a0:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b3b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b3c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b3d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b3e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b3f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b400:·6964·6d37·3235·3122·2074·6162·696e·6465··idm7251"·tabinde | |||
| 0003b410:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b420:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b430:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b440:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b450:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b460:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b470:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b480:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b490:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b4a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b4b0:·3235·3122·3e3c·7461·626c·6520·636c·6173··251"><table·clas | |||
| 0003b4c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b4d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b4e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b4f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b500:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b510:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b520:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b530:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b540:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b550:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b560:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b570:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b580:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b590:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b5a0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b5b0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b5c0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b5d0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b5e0:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b5f0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b600:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b610:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b620:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b630:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b640:·6465·2220·3b20·7468·656e·0a20·2020·2064··de"·;·then.····d | |||
| 0003b650:·6e66·2069·6e73·7461·6c6c·202d·7920·2261··nf·install·-y·"a | |||
| 0003b660:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003b670:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b680:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b690:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b6a0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b6b0:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b6c0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b6d0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b6e0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b6f0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b700:·2d74·6172·6765·743d·2223·6964·6d37·3235··-target="#idm725 | |||
| 0003b710:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b720:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b730:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b740:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b750:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b760:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b770:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b780:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b790:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b7a0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b7b0:·7073·6522·2069·643d·2269·646d·3732·3532··pse"·id="idm7252 | |||
| 0003b7c0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b7d0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b7e0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b7f0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b800:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b810:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b820:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b830:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b840:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b850:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b860:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| Max diff block lines reached; 32796882/32829090 bytes (99.90%) of diff not shown. | |||
| Offset 14451, 15 lines modified | Offset 14451, 15 lines modified | ||
| 00038720:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038720:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038730:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038730:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038740:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038740:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038750:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038750:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038760:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038760:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038770:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038770:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038780:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038780:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038790:·7320·6f66·2032·3032·3 | 00038790:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 000387a0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000387a0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387b0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387b0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387c0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387c0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387d0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387d0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387e0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387e0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000387f0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000387f0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038800:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038800:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15247, 237 lines modified | Offset 15247, 237 lines modified | ||
| 0003b8e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b8e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b8f0:·2223·6964·6d37·3938·3022·2074·6162·696e··"#idm7980"·tabin | 0003b8f0:·2223·6964·6d37·3938·3022·2074·6162·696e··"#idm7980"·tabin | ||
| 0003b900:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b900:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b910:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b910:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b920:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b920:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b930:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b930:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b940:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b940:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b950:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b950:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | ||
| 0003b960:· | 0003b960:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | ||
| 0003b970:· | 0003b970:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b980:· | 0003b980:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b990:· | 0003b990:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b9a0:· | 0003b9a0:·6964·6d37·3938·3022·3e3c·7461·626c·6520··idm7980"><table· | ||
| 0003b9b0:·6 | 0003b9b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b9c0:·6 | 0003b9c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b9d0:· | 0003b9d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b9e0:·6 | 0003b9e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b9f0:· | 0003b9f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003ba00:· | 0003ba00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003ba10:· | 0003ba10:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003ba20:·7 | 0003ba20:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003ba30:·6 | 0003ba30:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003ba40:· | 0003ba40:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003ba50:· | 0003ba50:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003ba60:· | 0003ba60:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003ba70:·7 | 0003ba70:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003ba80:·6 | 0003ba80:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003ba90:· | 0003ba90:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003baa0:·6465·3e0a·7061·636b·6167·6520·2d2d·6164··de>.package·--ad | |||
| 0003bab0:·643d·6169·6465·0a3c·2f63·6f64·653e·3c2f··d=aide.</code></ | |||
| 0003bac0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ba | 0003baa0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | ||
| 0003bab0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003bac0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003bad0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003bae0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003baf0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003bb00:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003bb10:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bb20:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bb30:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bb40:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bb50:·7267·6574·3d22·2369·646d·3739·3831·2220··rget="#idm7981"· | |||
| 0003bb60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bb70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bb80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bb90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bba0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bbb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bbc0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003bbd0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bbe0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bbf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bc00:·643d·2269·646d·3739·3831·223e·3c74·6162··d="idm7981"><tab | |||
| 0003bc10:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bc20:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bc30:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bc40:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003bc50:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003bc60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bc70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003bc80:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003bc90:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bca0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003bcb0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003bcc0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003bcd0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003bce0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003bcf0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003bd00:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0003bd10:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003bd20:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003bd30:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0003bd40:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0003bd50:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0003bd60:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0003bd70:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0003bd80:·6966·2021·2072·706d·202d·7120·2d2d·7175··if·!·rpm·-q·--qu | |||
| 0003bd90:·6965·7420·2261·6964·6522·203b·2074·6865··iet·"aide"·;·the | |||
| 0003bda0:·6e0a·2020·2020·7975·6d20·696e·7374·616c··n.····yum·instal | |||
| 0003bdb0:·6c20·2d79·2022·6169·6465·220a·6669·0a0a··l·-y·"aide".fi.. | |||
| 0003bdc0:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003bdd0:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003bde0:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003bdf0:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003be00:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003be10:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003be20:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003be30:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003be40:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b | 0003be50:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003be60:·2369·646d·3739·3832·2220·7461·6269·6e64··#idm7982"·tabind | |||
| 0003be70:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003be80:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003be90:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003bea0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003beb0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bec0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003bed0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003bee0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bef0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b | 0003bf00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003bb00:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | |||
| 0003bb10:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003bb20:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bb30:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bb40:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bb50:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bb60:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bb70:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003bb80:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| Max diff block lines reached; 22231459/22263943 bytes (99.85%) of diff not shown. | |||
| Offset 14450, 15 lines modified | Offset 14450, 15 lines modified | ||
| 00038710:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038710:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038720:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038720:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038730:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038730:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038740:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038740:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038750:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038750:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038760:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038760:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038770:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038770:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038780:·7320·6f66·2032·3032·3 | 00038780:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 00038790:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038790:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000387e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000387e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000387f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000387f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15253, 236 lines modified | Offset 15253, 236 lines modified | ||
| 0003b940:·6574·3d22·2369·646d·3739·3830·2220·7461··et="#idm7980"·ta | 0003b940:·6574·3d22·2369·646d·3739·3830·2220·7461··et="#idm7980"·ta | ||
| 0003b950:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b950:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b960:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b960:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b970:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b970:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b980:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b980:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b990:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b990:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b9a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b9a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b9b0:· | 0003b9b0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | ||
| 0003b9c0:· | 0003b9c0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b9d0:· | 0003b9d0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b9e0:·6 | 0003b9e0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b9f0:· | 0003b9f0:·643d·2269·646d·3739·3830·223e·3c74·6162··d="idm7980"><tab | ||
| 0003ba00:·6 | 0003ba00:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003ba10:· | 0003ba10:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003ba20:· | 0003ba20:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003ba30:·6 | 0003ba30:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003ba40:· | 0003ba40:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003ba50:· | 0003ba50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003ba60:· | 0003ba60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003ba70:· | 0003ba70:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003ba80:· | 0003ba80:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003ba90:· | 0003ba90:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003baa0:· | 0003baa0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003bab0:· | 0003bab0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003bac0:· | 0003bac0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003bad0:· | 0003bad0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003bae0:· | 0003bae0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003baf0:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 0003bb00:·2d61·6464·3d61·6964·650a·3c2f·636f·6465··-add=aide.</code | |||
| 0003bb10:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bb20:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b | 0003baf0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | ||
| 0003bb00:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003bb10:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003bb20:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003bb30:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003bb40:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003bb50:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003bb60:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bb70:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bb80:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bb90:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bba0:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | |||
| 0003bbb0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003bbc0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bbd0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bbe0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bbf0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bc00:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bc10:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003bc20:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bc30:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bc40:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bc50:·2220·6964·3d22·6964·6d37·3938·3122·3e3c··"·id="idm7981">< | |||
| 0003bc60:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bc70:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bc80:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bc90:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bca0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bcb0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bcc0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bcd0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bce0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bcf0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bd00:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003bd10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bd20:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003bd30:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003bd40:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003bd50:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003bd60:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003bd70:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003bd80:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003bd90:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003bda0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003bdb0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0003bdc0:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0003bdd0:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 0003bde0:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 0003bdf0:·7468·656e·0a20·2020·2079·756d·2069·6e73··then.····yum·ins | |||
| 0003be00:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| 0003be10:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 0003be20:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003be30:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003be40:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003be50:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003be60:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003be70:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003be80:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003be90:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bea0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003beb0:·743d·2223·6964·6d37·3938·3222·2074·6162··t="#idm7982"·tab | |||
| 0003bec0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bed0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bee0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bef0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bf00:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bf10:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003bf20:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003bf30:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bf40:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b | 0003bf50:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003bb50:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bb60:·3739·3831·2220·7461·6269·6e64·6578·3d22··7981"·tabindex=" | |||
| 0003bb70:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bb80:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bb90:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bba0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bbb0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bbc0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003bbd0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| Max diff block lines reached; 22508142/22540488 bytes (99.86%) of diff not shown. | |||
| Offset 14452, 15 lines modified | Offset 14452, 15 lines modified | ||
| 00038730:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038730:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038740:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038740:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038750:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038750:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038760:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038760:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038770:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038770:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038780:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038780:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038790:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038790:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000387a0:·7320·6f66·2032·3032·3 | 000387a0:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 000387b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000387b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038800:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038800:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038810:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038810:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15243, 236 lines modified | Offset 15243, 236 lines modified | ||
| 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b8b0:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 0003b8b0:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b910:·6d65·6469·6174·696f·6e20· | 0003b910:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003b920:· | 0003b920:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b930:· | 0003b930:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b940:· | 0003b940:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b950:· | 0003b950:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b960:· | 0003b960:·3739·3830·223e·3c74·6162·6c65·2063·6c61··7980"><table·cla | ||
| 0003b970:· | 0003b970:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b980:· | 0003b980:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b990:· | 0003b990:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b9a0:·6 | 0003b9a0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b9b0:· | 0003b9b0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b9c0:· | 0003b9c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b9d0:· | 0003b9d0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b9e0:· | 0003b9e0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b9f0:· | 0003b9f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003ba00:· | 0003ba00:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003ba10:· | 0003ba10:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003ba20:· | 0003ba20:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003ba30:· | 0003ba30:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003ba40:·6 | 0003ba40:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003ba50:·6 | 0003ba50:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | ||
| 0003ba60:·0a70·6163·6b61·6765·202d·2d61·6464·3d61··.package·--add=a | |||
| 0003ba70:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | |||
| 0003ba80:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003ba90:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003baa0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bab0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bac0:·7267·6574·3d22·2369·646d·3739·3831·2220··rget="#idm7981"· | |||
| 0003bad0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bae0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003baf0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bb00:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bb10:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bb20:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bb30:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003bb40:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bb50:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bb60:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bb70:·2069·643d·2269·646d·3739·3831·223e·3c74···id="idm7981"><t | |||
| 0003bb80:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bb90:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bba0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bbb0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b | 0003ba60:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | ||
| 0003ba70:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003ba80:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003ba90:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003baa0:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003bab0:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003bac0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bad0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bae0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003baf0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bb00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bb10:·743d·2223·6964·6d37·3938·3122·2074·6162··t="#idm7981"·tab | |||
| 0003bb20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bb30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bb40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bb50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bb60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bb70:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003bb80:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003bb90:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bba0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bbb0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bbc0:·6964·6d37·3938·3122·3e3c·7461·626c·6520··idm7981"><table· | |||
| 0003bbd0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bbe0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bbf0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bc00:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bc10:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bc20:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bc30:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003bc40:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bc50:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bc60:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003bc70:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003bc80:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b | 0003bc90:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003bbe0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003bca0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003bcb0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bcc0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003bcd0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003bce0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003bcf0:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003bd00:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003bd10:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003bd20:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003bd30:·656e·7620·5d3b·2074·6865·6e0a·0a69·6620··env·];·then..if· | |||
| 0003bd40:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 0003bd50:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 0003bd60:·2020·2079·756d·2069·6e73·7461·6c6c·202d·····yum·install·- | |||
| 0003bd70:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 0003bd80:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003bd90:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003bda0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003bdb0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003bdc0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003bdd0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bde0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bdf0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003be00:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003be10:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| Max diff block lines reached; 9229591/9261937 bytes (99.65%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 69 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 70 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 70 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 131, 33 lines modified | Offset 131, 41 lines modified | ||
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 135 | ·············_\x8c_\x8i_\x8s············5.3.1 | 135 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package·--add=aide | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | include·install_aide | 143 | include·install_aide |
| 150 | class·install_aide·{ | 144 | class·install_aide·{ |
| 151 | ··package·{·'aide': | 145 | ··package·{·'aide': |
| 152 | ····ensure·=>·'installed', | 146 | ····ensure·=>·'installed', |
| 153 | ··} | 147 | ··} |
| 154 | } | 148 | } |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 156 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 157 | ····yum·install·-y·"aide" | ||
| 158 | fi | ||
| 159 | else | ||
| 160 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 161 | fi | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | -·name:·Ensure·aide·is·installed | 167 | -·name:·Ensure·aide·is·installed |
| 161 | ··package: | 168 | ··package: |
| Offset 178, 36 lines modified | Offset 186, 28 lines modified | ||
| 178 | ··-·no_reboot_needed | 186 | ··-·no_reboot_needed |
| 179 | ··-·package_aide_installed | 187 | ··-·package_aide_installed |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 181 | [[packages]] | 189 | [[packages]] |
| 182 | name·=·"aide" | 190 | name·=·"aide" |
| 183 | version·=·"*" | 191 | version·=·"*" |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 190 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 191 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 192 | ····yum·install·-y·"aide" | ||
| 193 | fi | ||
| 197 | package·install·aide | ||
| 194 | else | ||
| 195 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 196 | fi | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 202 | package· | 203 | package·--add=aide |
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 205 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 207 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 208 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 208 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 209 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 209 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 210 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 234, 14 lines modified | Offset 234, 28 lines modified | ||
| 234 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 234 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 235 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 235 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 237 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 237 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 238 | ·············_\x8c_\x8i_\x8s············5.3.1 | 238 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 239 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 239 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 242 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 243 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 244 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 245 | ····yum·install·-y·"aide" | ||
| 246 | fi | ||
| 247 | /usr/sbin/aide·--init | ||
| 248 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 249 | else | ||
| 250 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 251 | fi | ||
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 252 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 253 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 254 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1071005/1076656 bytes (99.48%) of diff not shown. | |||
| Offset 14451, 15 lines modified | Offset 14451, 15 lines modified | ||
| 00038720:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038720:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038730:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038730:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038740:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038740:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038750:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038750:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038760:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038760:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038770:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038770:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038780:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038780:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038790:·2032·3032·3 | 00038790:·2032·3032·352d·3132·2d31·3129·0a20·2020···2025-12-11).··· | ||
| 000387a0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000387a0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000387b0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000387b0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 000387c0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 000387c0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 000387d0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 000387d0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000387e0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000387e0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000387f0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000387f0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038800:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038800:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14901, 217 lines modified | Offset 14901, 217 lines modified | ||
| 0003a340:·6765·743d·2223·6964·6d31·3333·3839·2220··get="#idm13389"· | 0003a340:·6765·743d·2223·6964·6d31·3333·3839·2220··get="#idm13389"· | ||
| 0003a350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003a350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003a360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003a360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003a370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003a370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003a380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003a380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003a390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003a390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003a3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003a3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003a3b0:·6e20· | 0003a3b0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | ||
| 0003a3c0:· | 0003a3c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003a3d0:· | 0003a3d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003a3e0:·6 | 0003a3e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003a3f0:· | 0003a3f0:·2069·643d·2269·646d·3133·3338·3922·3e3c···id="idm13389">< | ||
| 0003a400:· | 0003a400:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003a410:·6 | 0003a410:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003a420:· | 0003a420:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003a430:· | 0003a430:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003a440:· | 0003a440:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003a450:·6 | 0003a450:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003a460:· | 0003a460:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003a470:· | 0003a470:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003a480:· | 0003a480:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003a490:· | 0003a490:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003a4a0:· | 0003a4a0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003a4b0:· | 0003a4b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003a4c0:· | 0003a4c0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003a4d0:· | 0003a4d0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003a4e0:· | 0003a4e0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003a4f0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003a4f0:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003a500:·6520·2d2d·6164·643d·646e·662d·6175·746f··e·--add=dnf-auto | |||
| 0003a510:·6d61·7469·630a·3c2f·636f·6465·3e3c·2f70··matic.</code></p | |||
| 0003a520:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003a530:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003a540:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003a550:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003a560:·7461·7267·6574·3d22·2369·646d·3133·3339··target="#idm1339 | |||
| 0003a570:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003a580:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003a590:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003a5a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003a5b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003a5c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003a5d0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003a5e0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003a5f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003a600:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003a610:·7365·2220·6964·3d22·6964·6d31·3333·3930··se"·id="idm13390 | |||
| 0003a620:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003a630:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003a640:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003a650:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003a660:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003a670:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003a680:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003a690:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003a6a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003a6b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003a6c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003a6d0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003a6e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003a6f0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003a700:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003a710:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003a720:·6520·696e·7374·616c·6c5f·646e·662d·6175··e·install_dnf-au | |||
| 0003a730:·746f·6d61·7469·630a·0a63·6c61·7373·2069··tomatic..class·i | |||
| 0003a | 0003a500:·6e73·7461·6c6c·5f64·6e66·2d61·7574·6f6d··nstall_dnf-autom | ||
| 0003a510:·6174·6963·0a0a·636c·6173·7320·696e·7374··atic..class·inst | |||
| 0003a750:·6174·6963·207b·0a20·2070·6163·6b61·6765··atic·{.··package | |||
| 0003a760:·207b·2027·646e·662d·6175·746f·6d61·7469···{·'dnf-automati | |||
| 0003a770:·6327·3a0a·2020·2020·656e·7375·7265·203d··c':.····ensure·= | |||
| 0003a780:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003a790:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003a7a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003a7b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003a7c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003a7d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003a7e0:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | |||
| 0003a7f0:·3339·3122·2074·6162·696e·6465·783d·2230··391"·tabindex="0 | |||
| 0003a800:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a810:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a820:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a830:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a840:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003a850:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003a860:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003a870:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003a880:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003a890:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003a8a0:·3339·3122·3e3c·7461·626c·6520·636c·6173··391"><table·clas | |||
| 0003a8b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003a8c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003a8d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003a8e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a8f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003a900:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a910:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a920:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003a930:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003a940:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003a950:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003a960:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003a970:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003a980:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003a990:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003a9a0:·616d·653a·2045·6e73·7572·6520·646e·662d··ame:·Ensure·dnf- | |||
| 0003a9b0:·6175·746f·6d61·7469·6320·6973·2069·6e73··automatic·is·ins | |||
| 0003a9c0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003a9d0:·3a0a·2020·2020·6e61·6d65·3a20·646e·662d··:.····name:·dnf- | |||
| 0003a9e0:·6175·746f·6d61·7469·630a·2020·2020·7374··automatic.····st | |||
| 0003a9f0:·6174·653a·2070·7265·7365·6e74·0a20·2074··ate:·present.··t | |||
| 0003aa00:·6167·733a·0a20·202d·2043·4345·2d38·3239··ags:.··-·CCE-829 | |||
| Max diff block lines reached; 3128494/3158218 bytes (99.06%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 68 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 69 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 69 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 70 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 70 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 94, 33 lines modified | Offset 94, 35 lines modified | ||
| 94 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 94 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 95 | ·············suitable·for·automatic,·regular·execution. | 95 | ·············suitable·for·automatic,·regular·execution. |
| 96 | Severity: ···medium | 96 | Severity: ···medium |
| 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 98 | Identifiers:·CCE-82985-3 | 98 | Identifiers:·CCE-82985-3 |
| 99 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 99 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 100 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 100 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 106 | package·--add=dnf-automatic | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | include·install_dnf-automatic | 106 | include·install_dnf-automatic |
| 113 | class·install_dnf-automatic·{ | 107 | class·install_dnf-automatic·{ |
| 114 | ··package·{·'dnf-automatic': | 108 | ··package·{·'dnf-automatic': |
| 115 | ····ensure·=>·'installed', | 109 | ····ensure·=>·'installed', |
| 116 | ··} | 110 | ··} |
| 117 | } | 111 | } |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 118 | ····yum·install·-y·"dnf-automatic" | ||
| 119 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | -·name:·Ensure·dnf-automatic·is·installed | 125 | -·name:·Ensure·dnf-automatic·is·installed |
| 124 | ··package: | 126 | ··package: |
| Offset 135, 30 lines modified | Offset 137, 28 lines modified | ||
| 135 | ··-·no_reboot_needed | 137 | ··-·no_reboot_needed |
| 136 | ··-·package_dnf-automatic_installed | 138 | ··-·package_dnf-automatic_installed |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | [[packages]] | 140 | [[packages]] |
| 139 | name·=·"dnf-automatic" | 141 | name·=·"dnf-automatic" |
| 140 | version·=·"*" | 142 | version·=·"*" |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | package·install·dnf-automatic | ||
| 146 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 147 | ····yum·install·-y·"dnf-automatic" | ||
| 148 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | package· | 154 | package·--add=dnf-automatic |
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 156 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 157 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 157 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 158 | automatic.conf. | 158 | automatic.conf. |
| 159 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 159 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 160 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 160 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 161 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 161 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 169, 37 lines modified | Offset 169, 14 lines modified | ||
| 169 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 169 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 170 | Identifiers:·CCE-82494-6 | 170 | Identifiers:·CCE-82494-6 |
| 171 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 171 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 172 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 172 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 173 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 173 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 174 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 174 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 175 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 175 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 181 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 182 | ··ini_file: | ||
| 183 | ····dest:·/etc/dnf/automatic.conf | ||
| 184 | ····section:·commands | ||
| 185 | ····option:·apply_updates | ||
| 186 | ····value:·'yes' | ||
| 187 | ····create:·true | ||
| 188 | ··tags: | ||
| 189 | ··-·CCE-82494-6 | ||
| 190 | ··-·NIST-800-53-CM-6(a) | ||
| 191 | ··-·NIST-800-53-SI-2(5) | ||
| 192 | ··-·NIST-800-53-SI-2(c) | ||
| 193 | ··-·dnf-automatic_apply_updates | ||
| 194 | ··-·low_complexity | ||
| 195 | ··-·medium_disruption | ||
| 196 | ··-·medium_severity | ||
| 197 | ··-·no_reboot_needed | ||
| 198 | ··-·unknown_strategy | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 200 | found=false | 177 | found=false |
| 201 | #·set·value·in·all·files·if·they·contain·section·or·key | 178 | #·set·value·in·all·files·if·they·contain·section·or·key |
| 202 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | 179 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do |
| Max diff block lines reached; 213669/219301 bytes (97.43%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038610:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038620:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038620:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038630:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038630:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038640:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038640:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038650:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038650:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038660:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038660:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038670:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038670:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038680:·3230·323 | 00038680:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00038690:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038690:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 000386a0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 000386a0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 000386b0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 000386b0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 000386c0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 000386c0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 000386d0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 000386d0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 000386e0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 000386e0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 000386f0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 000386f0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15293, 236 lines modified | Offset 15293, 236 lines modified | ||
| 0003bbc0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003bbc0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bbd0:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | 0003bbd0:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | ||
| 0003bbe0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003bbe0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003bbf0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003bbf0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003bc00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003bc00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003bc10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003bc10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003bc20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003bc20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003bc30:·6564·6961·7469·6f6e·20 | 0003bc30:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | ||
| 0003bc40:· | 0003bc40:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003bc50:· | 0003bc50:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003bc60:· | 0003bc60:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003bc70:·6 | 0003bc70:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 0003bc80:· | 0003bc80:·3938·3022·3e3c·7461·626c·6520·636c·6173··980"><table·clas | ||
| 0003bc90:· | 0003bc90:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003bca0:· | 0003bca0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003bcb0:·6 | 0003bcb0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003bcc0:·6 | 0003bcc0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003bcd0:· | 0003bcd0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003bce0:· | 0003bce0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003bcf0:· | 0003bcf0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003bd00:· | 0003bd00:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003bd10:· | 0003bd10:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bd20:· | 0003bd20:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003bd30:· | 0003bd30:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003bd40:· | 0003bd40:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003bd50:· | 0003bd50:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003bd60:· | 0003bd60:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003bd70:·6 | 0003bd70:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | ||
| 0003bd80:·7061·636b·6167·6520·2d2d·6164·643d·6169··package·--add=ai | |||
| 0003bd90:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003bda0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003bdb0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bdc0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bdd0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bde0:·6765·743d·2223·6964·6d37·3938·3122·2074··get="#idm7981"·t | |||
| 0003bdf0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003be00:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003be10:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003be20:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003be30:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003be40:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003be50:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003be60:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003be70:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003be80:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003be90:·6964·3d22·6964·6d37·3938·3122·3e3c·7461··id="idm7981"><ta | |||
| 0003bea0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003beb0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003bec0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003bed0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003bee0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003bef0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003bf00:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003bd80:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | ||
| 0003bd90:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003bda0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003bdb0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003bdc0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003bdd0:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003bde0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003bdf0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003be00:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003be10:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003be20:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003be30:·3d22·2369·646d·3739·3831·2220·7461·6269··="#idm7981"·tabi | |||
| 0003be40:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003be50:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003be60:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003be70:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003be80:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003be90:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003bea0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003beb0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bec0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bed0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bee0:·646d·3739·3831·223e·3c74·6162·6c65·2063··dm7981"><table·c | |||
| 0003bef0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bf00:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bf10:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bf20:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bf30:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bf | 0003bf40:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003bf30:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003bf | 0003bf50:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003bf60:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bf | 0003bf70:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003bf60:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003bf70:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003bf80:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003bf90:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003bfa0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003bfb0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003bfc0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003bfd0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003bfe0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003bf | 0003bf80:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003bf90:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003bfa0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003bfb0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003bfc0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003bfd0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bfe0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003bff0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003c000:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003c010:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 0003c020:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 0003c030:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 0003c040:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 0003c050:·6e76·205d·3b20·7468·656e·0a0a·6966·2021··nv·];·then..if·! | |||
| 0003c060:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003c070:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| Max diff block lines reached; 25451210/25483556 bytes (99.87%) of diff not shown. | |||
| Offset 14434, 16 lines modified | Offset 14434, 16 lines modified | ||
| 00038610:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00038610:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00038620:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00038620:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00038630:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00038630:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038640:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038640:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038650:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038650:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038660:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038660:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038670:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038670:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038680:·2020·2028·6173·206f·6620·3230·323 | 00038680:·2020·2028·6173·206f·6620·3230·3235·2d31·····(as·of·2025-1 | ||
| 00038690:·3 | 00038690:·322d·3131·290a·2020·2020·2020·2020·2020··2-11).·········· | ||
| 000386a0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 000386a0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 000386b0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 000386b0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 000386c0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 000386c0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 000386d0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 000386d0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 000386e0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 000386e0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 000386f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 000386f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00038700:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00038700:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15262, 236 lines modified | Offset 15262, 236 lines modified | ||
| 0003b9d0:·7461·7267·6574·3d22·2369·646d·3739·3830··target="#idm7980 | 0003b9d0:·7461·7267·6574·3d22·2369·646d·3739·3830··target="#idm7980 | ||
| 0003b9e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b9e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b9f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b9f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ba00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ba00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ba10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ba10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ba20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ba20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ba30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ba30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ba40:·696f·6e20· | 0003ba40:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | ||
| 0003ba50:· | 0003ba50:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003ba60:· | 0003ba60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003ba70:·6 | 0003ba70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003ba80:· | 0003ba80:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | ||
| 0003ba90:· | 0003ba90:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003baa0:· | 0003baa0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003bab0:· | 0003bab0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003bac0:· | 0003bac0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003bad0:· | 0003bad0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003bae0:· | 0003bae0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003baf0:· | 0003baf0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003bb00:· | 0003bb00:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003bb10:· | 0003bb10:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003bb20:· | 0003bb20:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003bb30:·6 | 0003bb30:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003bb40:·6 | 0003bb40:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003bb50:· | 0003bb50:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003bb60:· | 0003bb60:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003bb70:· | 0003bb70:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003bb80:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003bb90:·6765·202d·2d61·6464·3d61·6964·650a·3c2f··ge·--add=aide.</ | |||
| 0003bba0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bbb0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bbc0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bbd0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003bbe0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003bbf0:·2369·646d·3739·3831·2220·7461·6269·6e64··#idm7981"·tabind | |||
| 0003bc00:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003bc10:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003bc20:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003bc30:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003bc40:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bc50:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003bc60:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003bc70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bc80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bc90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bca0:·646d·3739·3831·223e·3c74·6162·6c65·2063··dm7981"><table·c | |||
| 0003bcb0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bcc0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bcd0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bce0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bcf0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bd00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd10:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b | 0003bb80:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | ||
| 0003bb90:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003bba0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003bbb0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003bbc0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003bbd0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003bbe0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003bbf0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bc00:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bc10:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003bc20:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bc30:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bc40:·6d37·3938·3122·2074·6162·696e·6465·783d··m7981"·tabindex= | |||
| 0003bc50:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bc60:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bc70:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bc80:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bc90:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003bca0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003bcb0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003bcc0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bcd0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bce0:·6170·7365·2220·6964·3d22·6964·6d37·3938··apse"·id="idm798 | |||
| 0003bcf0:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003bd00:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bd10:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bd20:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bd30:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bd40:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bd | 0003bd50:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003bd40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bd | 0003bd60:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003bd70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bd | 0003bd80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003bd | 0003bd90:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003bd80:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003bd90:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bda0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003bdb0:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003bdc0:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003bdd0:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003bde0:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003bd | 0003bda0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003bdb0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bdc0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003bdd0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003bde0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003bdf0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003be00:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003be10:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003be20:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | |||
| 0003be30:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | |||
| 0003be40:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | |||
| 0003be50:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | |||
| 0003be60:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 0003be70:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 0003be80:·2220·3b20·7468·656e·0a20·2020·2079·756d··"·;·then.····yum | |||
| Max diff block lines reached; 10817388/10849872 bytes (99.70%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 117, 33 lines modified | Offset 117, 41 lines modified | ||
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ·············_\x8c_\x8i_\x8s············5.3.1 | 121 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | package·--add=aide | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | include·install_aide | 129 | include·install_aide |
| 136 | class·install_aide·{ | 130 | class·install_aide·{ |
| 137 | ··package·{·'aide': | 131 | ··package·{·'aide': |
| 138 | ····ensure·=>·'installed', | 132 | ····ensure·=>·'installed', |
| 139 | ··} | 133 | ··} |
| 140 | } | 134 | } |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 142 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 143 | ····yum·install·-y·"aide" | ||
| 144 | fi | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 146 | -·name:·Ensure·aide·is·installed | 153 | -·name:·Ensure·aide·is·installed |
| 147 | ··package: | 154 | ··package: |
| Offset 164, 36 lines modified | Offset 172, 28 lines modified | ||
| 164 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | [[packages]] | 175 | [[packages]] |
| 168 | name·=·"aide" | 176 | name·=·"aide" |
| 169 | version·=·"*" | 177 | version·=·"*" |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 177 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 178 | ····yum·install·-y·"aide" | ||
| 179 | fi | ||
| 183 | package·install·aide | ||
| 180 | else | ||
| 181 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 182 | fi | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | package· | 189 | package·--add=aide |
| 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 190 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 191 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 194 | To·initiate·a·manual·check,·run·the·following·command: | 195 | To·initiate·a·manual·check,·run·the·following·command: |
| 195 | $·sudo·/usr/sbin/aide·--check | 196 | $·sudo·/usr/sbin/aide·--check |
| Offset 213, 14 lines modified | Offset 213, 28 lines modified | ||
| 213 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 213 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 214 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 214 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 217 | ·············_\x8c_\x8i_\x8s············5.3.1 | 217 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 219 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 219 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 221 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 222 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 223 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 224 | ····yum·install·-y·"aide" | ||
| 225 | fi | ||
| 226 | /usr/sbin/aide·--init | ||
| 227 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 228 | else | ||
| 229 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 230 | fi | ||
| 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 232 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 233 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1319522/1325292 bytes (99.56%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000386a0:·323 | 000386a0:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15253, 236 lines modified | Offset 15253, 236 lines modified | ||
| 0003b940:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b940:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b950:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 0003b950:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 0003b960:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b960:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b970:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b970:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b980:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b980:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b990:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b990:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b9a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b9a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b9b0:·6d65·6469·6174·696f·6e20· | 0003b9b0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003b9c0:· | 0003b9c0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b9d0:· | 0003b9d0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b9e0:· | 0003b9e0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b9f0:· | 0003b9f0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003ba00:· | 0003ba00:·3739·3830·223e·3c74·6162·6c65·2063·6c61··7980"><table·cla | ||
| 0003ba10:· | 0003ba10:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003ba20:· | 0003ba20:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003ba30:· | 0003ba30:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003ba40:·6 | 0003ba40:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003ba50:· | 0003ba50:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003ba60:· | 0003ba60:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003ba70:· | 0003ba70:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003ba80:· | 0003ba80:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003ba90:· | 0003ba90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003baa0:· | 0003baa0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003bab0:· | 0003bab0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003bac0:· | 0003bac0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003bad0:· | 0003bad0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003bae0:·6 | 0003bae0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003baf0:·6 | 0003baf0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | ||
| 0003bb00:·0a70·6163·6b61·6765·202d·2d61·6464·3d61··.package·--add=a | |||
| 0003bb10:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | |||
| 0003bb20:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bb30:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bb40:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bb50:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bb60:·7267·6574·3d22·2369·646d·3739·3831·2220··rget="#idm7981"· | |||
| 0003bb70:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bb80:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bb90:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bba0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bbb0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bbc0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bbd0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003bbe0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bbf0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bc00:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bc10:·2069·643d·2269·646d·3739·3831·223e·3c74···id="idm7981"><t | |||
| 0003bc20:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bc30:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bc40:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bc50:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b | 0003bb00:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | ||
| 0003bb10:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003bb20:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003bb30:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003bb40:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003bb50:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003bb60:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bb70:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bb80:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bb90:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bba0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bbb0:·743d·2223·6964·6d37·3938·3122·2074·6162··t="#idm7981"·tab | |||
| 0003bbc0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bbd0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bbe0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bbf0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bc00:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bc10:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003bc20:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003bc30:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bc40:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bc50:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bc60:·6964·6d37·3938·3122·3e3c·7461·626c·6520··idm7981"><table· | |||
| 0003bc70:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bc80:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bc90:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bca0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bcb0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bcc0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bcd0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003bce0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bcf0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bd00:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003bd10:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003bd20:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b | 0003bd30:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003bc80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003bd40:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003bd50:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bd60:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003bd70:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003bd80:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003bd90:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0003bda0:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0003bdb0:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0003bdc0:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0003bdd0:·656e·7620·5d3b·2074·6865·6e0a·0a69·6620··env·];·then..if· | |||
| 0003bde0:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 0003bdf0:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 0003be00:·2020·2079·756d·2069·6e73·7461·6c6c·202d·····yum·install·- | |||
| 0003be10:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 0003be20:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003be30:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003be40:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003be50:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003be60:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003be70:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003be80:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003be90:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003bea0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003beb0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| Max diff block lines reached; 10536171/10568517 bytes (99.69%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 116, 33 lines modified | Offset 116, 41 lines modified | ||
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ·············_\x8c_\x8i_\x8s············5.3.1 | 120 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | package·--add=aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | include·install_aide | 128 | include·install_aide |
| 135 | class·install_aide·{ | 129 | class·install_aide·{ |
| 136 | ··package·{·'aide': | 130 | ··package·{·'aide': |
| 137 | ····ensure·=>·'installed', | 131 | ····ensure·=>·'installed', |
| 138 | ··} | 132 | ··} |
| 139 | } | 133 | } |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 141 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 142 | ····yum·install·-y·"aide" | ||
| 143 | fi | ||
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Ensure·aide·is·installed | 152 | -·name:·Ensure·aide·is·installed |
| 146 | ··package: | 153 | ··package: |
| Offset 163, 36 lines modified | Offset 171, 28 lines modified | ||
| 163 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 172 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | [[packages]] | 174 | [[packages]] |
| 167 | name·=·"aide" | 175 | name·=·"aide" |
| 168 | version·=·"*" | 176 | version·=·"*" |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 176 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 177 | ····yum·install·-y·"aide" | ||
| 178 | fi | ||
| 182 | package·install·aide | ||
| 179 | else | ||
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 181 | fi | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | package· | 188 | package·--add=aide |
| 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 189 | Run·the·following·command·to·generate·a·new·database: | 190 | Run·the·following·command·to·generate·a·new·database: |
| 190 | $·sudo·/usr/sbin/aide·--init | 191 | $·sudo·/usr/sbin/aide·--init |
| 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 192 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 193 | To·initiate·a·manual·check,·run·the·following·command: | 194 | To·initiate·a·manual·check,·run·the·following·command: |
| 194 | $·sudo·/usr/sbin/aide·--check | 195 | $·sudo·/usr/sbin/aide·--check |
| Offset 212, 14 lines modified | Offset 212, 28 lines modified | ||
| 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 215 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 215 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 216 | ·············_\x8c_\x8i_\x8s············5.3.1 | 216 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 218 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 218 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 220 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 221 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 222 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 223 | ····yum·install·-y·"aide" | ||
| 224 | fi | ||
| 225 | /usr/sbin/aide·--init | ||
| 226 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 227 | else | ||
| 228 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 229 | fi | ||
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1290654/1296424 bytes (99.55%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000386a0:·323 | 000386a0:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15285, 236 lines modified | Offset 15285, 236 lines modified | ||
| 0003bb40:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | 0003bb40:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | ||
| 0003bb50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bb50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bb60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bb60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003bb70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003bb70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bb80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003bb80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003bb90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003bb90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bba0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003bba0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bbb0:·6f6e·20 | 0003bbb0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | ||
| 0003bbc0:·7 | 0003bbc0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003bbd0:· | 0003bbd0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003bbe0:· | 0003bbe0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003bbf0:· | 0003bbf0:·2220·6964·3d22·6964·6d37·3938·3022·3e3c··"·id="idm7980">< | ||
| 0003bc00:· | 0003bc00:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003bc10:·6 | 0003bc10:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003bc20:· | 0003bc20:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003bc30:· | 0003bc30:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003bc40:· | 0003bc40:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003bc50:·6 | 0003bc50:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003bc60:· | 0003bc60:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bc70:· | 0003bc70:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003bc80:· | 0003bc80:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003bc90:· | 0003bc90:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003bca0:· | 0003bca0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003bcb0:· | 0003bcb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bcc0:· | 0003bcc0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003bcd0:· | 0003bcd0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003bce0:· | 0003bce0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003bcf0:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003bd00:·6520·2d2d·6164·643d·6169·6465·0a3c·2f63··e·--add=aide.</c | |||
| 0003bd10:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003bd20:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bd30:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bd40:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bd50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bd60:·6964·6d37·3938·3122·2074·6162·696e·6465··idm7981"·tabinde | |||
| 0003bd70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bd80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bd90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bda0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bdb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bdc0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003bdd0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003bde0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bdf0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003be00:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003be10:·6d37·3938·3122·3e3c·7461·626c·6520·636c··m7981"><table·cl | |||
| 0003be20:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003be30:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003be40:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003be50:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003be60:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003be70:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003bcf0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | ||
| 0003bd00:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003bd10:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003bd20:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003bd30:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003bd40:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003bd50:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003bd60:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bd70:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bd80:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bd90:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bda0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bdb0:·3739·3831·2220·7461·6269·6e64·6578·3d22··7981"·tabindex=" | |||
| 0003bdc0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bdd0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bde0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bdf0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003be00:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003be10:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003be20:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003be30:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003be40:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003be50:·7073·6522·2069·643d·2269·646d·3739·3831··pse"·id="idm7981 | |||
| 0003be60:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003be70:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003be80:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003be90:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bea0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003be | 0003beb0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003be | 0003bec0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003beb0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003be | 0003bed0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003bee0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003be | 0003bef0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003bf00:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003bef0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003bf00:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003bf10:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003bf20:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003bf30:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003bf40:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003bf50:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003bf | 0003bf10:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003bf20:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bf30:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003bf40:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003bf50:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003bf60:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003bf70:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003bf80:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003bf90:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003bfa0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003bfb0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003bfc0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003bfd0:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003bfe0:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003bff0:·203b·2074·6865·6e0a·2020·2020·7975·6d20···;·then.····yum· | |||
| 0003c000:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003c010:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| Max diff block lines reached; 25264937/25297283 bytes (99.87%) of diff not shown. | |||
| Offset 14469, 15 lines modified | Offset 14469, 15 lines modified | ||
| 00038840:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038840:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038850:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038850:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038860:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038860:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038870:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038870:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038880:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038880:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038890:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038890:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 000388a0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 000388a0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 000388b0:·6620·3230·323 | 000388b0:·6620·3230·3235·2d31·322d·3131·290a·2020··f·2025-12-11).·· | ||
| 000388c0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000388c0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000388d0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000388d0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000388e0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000388e0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000388f0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000388f0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038900:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038900:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038910:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038910:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038920:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038920:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15284, 236 lines modified | Offset 15284, 236 lines modified | ||
| 0003bb30:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | 0003bb30:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | ||
| 0003bb40:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003bb40:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003bb50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003bb50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003bb60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003bb60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bb70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003bb70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bb80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003bb80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bb90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003bb90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bba0:·7469·6f6e·20 | 0003bba0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | ||
| 0003bbb0:· | 0003bbb0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003bbc0:· | 0003bbc0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003bbd0:· | 0003bbd0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003bbe0:· | 0003bbe0:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | ||
| 0003bbf0:·3 | 0003bbf0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003bc00:· | 0003bc00:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003bc10:·6 | 0003bc10:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003bc20:· | 0003bc20:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003bc30:· | 0003bc30:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003bc40:· | 0003bc40:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003bc50:· | 0003bc50:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003bc60:· | 0003bc60:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003bc70:· | 0003bc70:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003bc80:· | 0003bc80:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003bc90:·6 | 0003bc90:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003bca0:· | 0003bca0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003bcb0:· | 0003bcb0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003bcc0:· | 0003bcc0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003bcd0:· | 0003bcd0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003bce0:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003bcf0:·6167·6520·2d2d·6164·643d·6169·6465·0a3c··age·--add=aide.< | |||
| 0003bd00:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bd10:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bd20:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bd30:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bd40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bd50:·2223·6964·6d37·3938·3122·2074·6162·696e··"#idm7981"·tabin | |||
| 0003bd60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bd70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bd80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bd90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bda0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bdb0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003bdc0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003bdd0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bde0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bdf0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003be00:·6964·6d37·3938·3122·3e3c·7461·626c·6520··idm7981"><table· | |||
| 0003be10:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003be20:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003be30:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003be40:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003be50:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003be60:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003be70:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b | 0003bce0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | ||
| 0003bcf0:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003bd00:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003bd10:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003bd20:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003bd30:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003bd40:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003bd50:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bd60:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bd70:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003bd80:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bd90:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bda0:·646d·3739·3831·2220·7461·6269·6e64·6578··dm7981"·tabindex | |||
| 0003bdb0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bdc0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bdd0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bde0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bdf0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003be00:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003be10:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003be20:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003be30:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003be40:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003be50:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 0003be60:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003be70:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003be80:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003be90:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bea0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003be | 0003beb0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003bea0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003be | 0003bec0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003bed0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003be | 0003bee0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003be | 0003bef0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003bee0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003bef0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bf00:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003bf10:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003bf20:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003bf30:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003bf40:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003bf | 0003bf00:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003bf10:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bf20:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bf30:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bf40:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0003bf50:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003bf60:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003bf70:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003bf80:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 0003bf90:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003bfa0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003bfb0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003bfc0:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003bfd0:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003bfe0:·6522·203b·2074·6865·6e0a·2020·2020·7975··e"·;·then.····yu | |||
| 0003bff0:·6d20·696e·7374·616c·6c20·2d79·2022·6169··m·install·-y·"ai | |||
| Max diff block lines reached; 9165047/9197393 bytes (99.65%) of diff not shown. | |||
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 62 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 63 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 64 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 64 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:8 | 65 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 33 lines modified | Offset 122, 41 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ·············_\x8c_\x8i_\x8s············5.3.1 | 126 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package·--add=aide | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | include·install_aide | 134 | include·install_aide |
| 141 | class·install_aide·{ | 135 | class·install_aide·{ |
| 142 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 143 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 144 | ··} | 138 | ··} |
| 145 | } | 139 | } |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 147 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 148 | ····yum·install·-y·"aide" | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | -·name:·Ensure·aide·is·installed | 158 | -·name:·Ensure·aide·is·installed |
| 152 | ··package: | 159 | ··package: |
| Offset 169, 36 lines modified | Offset 177, 28 lines modified | ||
| 169 | ··-·no_reboot_needed | 177 | ··-·no_reboot_needed |
| 170 | ··-·package_aide_installed | 178 | ··-·package_aide_installed |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 172 | [[packages]] | 180 | [[packages]] |
| 173 | name·=·"aide" | 181 | name·=·"aide" |
| 174 | version·=·"*" | 182 | version·=·"*" |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 180 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 181 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 182 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 183 | ····yum·install·-y·"aide" | ||
| 184 | fi | ||
| 188 | package·install·aide | ||
| 185 | else | ||
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 187 | fi | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 193 | package· | 194 | package·--add=aide |
| 194 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 195 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 195 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 196 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 196 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 197 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 197 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 198 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 215, 14 lines modified | Offset 215, 27 lines modified | ||
| 215 | ·············_\x8i_\x8s_\x8m······1446 | 215 | ·············_\x8i_\x8s_\x8m······1446 |
| 216 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 216 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 217 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 217 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 218 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 218 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 219 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 219 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 220 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 220 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 221 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 221 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 223 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 224 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 225 | fips-mode-setup·--enable | ||
| 226 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 227 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 228 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 229 | fi | ||
| 230 | else | ||
| 231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 232 | fi | ||
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| Max diff block lines reached; 1258609/1264943 bytes (99.50%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038630:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038640:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038640:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038650:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038650:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038660:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038660:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038670:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038670:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038680:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038680:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038690:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038690:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000386a0:·3 | 000386a0:·352d·3132·2d31·3129·0a20·2020·2020·2020··5-12-11).······· | ||
| 000386b0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000386b0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 000386c0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 000386c0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 000386d0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 000386d0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 000386e0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 000386e0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 000386f0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 000386f0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038700:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038700:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038710:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038710:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15318, 305 lines modified | Offset 15318, 305 lines modified | ||
| 0003bd50:·7267·6574·3d22·2369·646d·3736·3336·2220··rget="#idm7636"· | 0003bd50:·7267·6574·3d22·2369·646d·3736·3336·2220··rget="#idm7636"· | ||
| 0003bd60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bd60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bd70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bd70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bd80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bd80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bd90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bd90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bda0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bda0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bdb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bdb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bdc0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003bdd0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bde0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bdf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003be00:·643d·2269·646d·3736·3336·223e·3c70·7265··d="idm7636"><pre | |||
| 0003be10:·3e3c·636f·6465·3e0a·2320·4669·6e64·2077··><code>.#·Find·w | |||
| 0003be20:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | |||
| 0003be30:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | |||
| 0003be40:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | |||
| 0003be50:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | |||
| 0003be60:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | |||
| 0003be70:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | |||
| 0003be80:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | |||
| 0003be90:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | |||
| 0003bea0:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | |||
| 0003beb0:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | |||
| 0003bec0:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | |||
| 0003bed0:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | |||
| 0003bee0:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | |||
| 0003bef0:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | |||
| 0003bf00:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | |||
| 0003bf10:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | |||
| 0003bf20:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | |||
| 0003bf30:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | |||
| 0003bf40:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | |||
| 0003bf50:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | |||
| 0003bf60:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | |||
| 0003bf70:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | |||
| 0003bf80:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | |||
| 0003bf90:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | |||
| 0003bfa0:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | |||
| 0003bfb0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003bfc0:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | |||
| 0003bfd0:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | |||
| 0003bfe0:·2020·2020·7975·6d20·7265·696e·7374·616c······yum·reinstal | |||
| 0003bff0:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | |||
| 0003c000:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | |||
| 0003c010:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003c020:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003c030:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003c040:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003c050:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003c060:·7267·6574·3d22·2369·646d·3736·3337·2220··rget="#idm7637"· | |||
| 0003c070:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003c080:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003c090:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003c0a0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003c0b0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003c0c0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003 | 0003c0d0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003 | 0003c0e0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003 | 0003c0f0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003 | 0003c100:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003 | 0003c110:·2220·6964·3d22·6964·6d37·3633·3722·3e3c··"·id="idm7637">< | ||
| 0003 | 0003c120:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003 | 0003c130:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003 | 0003c140:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003 | 0003c150:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003 | 0003c160:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003 | 0003c170:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003 | 0003c180:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003 | 0003c190:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003 | 0003c1a0:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003 | 0003c1b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003 | 0003c1c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003 | 0003c1d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003 | 0003c1e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003 | 0003c1f0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003 | 0003c200:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 0003c210:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003 | 0003c220:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003 | 0003c230:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003 | 0003c240:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003 | 0003c250:·6427·0a20·2073·6574·5f66·6163·743a·0a20··d'.··set_fact:.· | ||
| 0003 | 0003c260:·2020·2070·6163·6b61·6765·5f6d·616e·6167·····package_manag | ||
| 0003 | 0003c270:·6572·5f72·6569·6e73·7461·6c6c·5f63·6d64··er_reinstall_cmd | ||
| 0003 | 0003c280:·3a20·7975·6d20·7265·696e·7374·616c·6c20··:·yum·reinstall· | ||
| 0003 | 0003c290:·2d79·0a20·2077·6865·6e3a·2061·6e73·6962··-y.··when:·ansib | ||
| 0003 | 0003c2a0:·6c65·5f64·6973·7472·6962·7574·696f·6e20··le_distribution· | ||
| 0003 | 0003c2b0:·696e·205b·2022·4665·646f·7261·222c·2022··in·[·"Fedora",·" | ||
| 0003 | 0003c2c0:·5265·6448·6174·222c·2022·4365·6e74·4f53··RedHat",·"CentOS | ||
| 0003 | 0003c2d0:·222c·2022·4f72·6163·6c65·4c69·6e75·7822··",·"OracleLinux" | ||
| 0003 | 0003c2e0:·205d·0a20·2074·6167·733a·0a20·202d·2043···].··tags:.··-·C | ||
| 0003 | 0003c2f0:·4345·2d38·3038·3537·2d36·0a20·202d·2043··CE-80857-6.··-·C | ||
| 0003 | 0003c300:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | ||
| 0003c | 0003c310:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003c | 0003c320:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003c | 0003c330:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003c | 0003c340:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003c | 0003c350:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003c | 0003c360:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003c | 0003c370:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003c | 0003c380:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003c | 0003c390:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003c | 0003c3a0:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003c | 0003c3b0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c | 0003c3c0:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003c | 0003c3d0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003c | 0003c3e0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003c | 0003c3f0:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003c | 0003c400:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003c | 0003c410:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003c | 0003c420:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003c | 0003c430:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| Max diff block lines reached; 6535914/6577782 bytes (99.36%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 64 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 65 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 65 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 66 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 66 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 115, 14 lines modified | Offset 115, 27 lines modified | ||
| 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 124 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 125 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 126 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 127 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 128 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 129 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 127 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 135 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 128 | ··set_fact: | 136 | ··set_fact: |
| Offset 254, 27 lines modified | Offset 267, 14 lines modified | ||
| 254 | ··-·PCI-DSSv4-11.5.2 | 267 | ··-·PCI-DSSv4-11.5.2 |
| 255 | ··-·high_complexity | 268 | ··-·high_complexity |
| 256 | ··-·high_severity | 269 | ··-·high_severity |
| 257 | ··-·medium_disruption | 270 | ··-·medium_disruption |
| 258 | ··-·no_reboot_needed | 271 | ··-·no_reboot_needed |
| 259 | ··-·restrict_strategy | 272 | ··-·restrict_strategy |
| 260 | ··-·rpm_verify_hashes | 273 | ··-·rpm_verify_hashes |
| 261 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 262 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 263 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 264 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 265 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 266 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 267 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 268 | fi | ||
| 269 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 274 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 270 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 275 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 271 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 276 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 272 | run·the·following·command·to·determine·which·package·owns·it: | 277 | run·the·following·command·to·determine·which·package·owns·it: |
| 273 | $·rpm·-qf·FILENAME | 278 | $·rpm·-qf·FILENAME |
| 274 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 279 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 275 | $·sudo·rpm·--setugids·PACKAGENAME | 280 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 294, 14 lines modified | Offset 294, 40 lines modified | ||
| 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 306 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 307 | declare·-A·SETPERMS_RPM_DICT | ||
| 308 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 309 | #·is·expected·by·the·RPM·database | ||
| 310 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 311 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 312 | do | ||
| 313 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 314 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 315 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 316 | done | ||
| 317 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 318 | #·correct·values | ||
| 319 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 320 | do | ||
| 321 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 322 | done | ||
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 306 | -·name:·Read·list·of·files·with·incorrect·ownership | 328 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 329 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 379, 40 lines modified | Offset 405, 14 lines modified | ||
| 379 | ··-·PCI-DSSv4-11.5.2 | 405 | ··-·PCI-DSSv4-11.5.2 |
| 380 | ··-·high_complexity | 406 | ··-·high_complexity |
| 381 | ··-·high_severity | 407 | ··-·high_severity |
| 382 | ··-·medium_disruption | 408 | ··-·medium_disruption |
| 383 | ··-·no_reboot_needed | 409 | ··-·no_reboot_needed |
| 384 | ··-·restrict_strategy | 410 | ··-·restrict_strategy |
| 385 | ··-·rpm_verify_ownership | 411 | ··-·rpm_verify_ownership |
| 386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 387 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 388 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 389 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 390 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 391 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 709188/716946 bytes (98.92%) of diff not shown. | |||
| Offset 14455, 16 lines modified | Offset 14455, 16 lines modified | ||
| 00038760:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038760:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038770:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038770:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038780:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038780:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038790:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038790:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 000387a0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 000387a0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 000387b0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 000387b0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 000387c0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000387c0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000387d0:·2020·2861·7320·6f66·2032·3032·3 | 000387d0:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 000387e0:·2d3 | 000387e0:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 000387f0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 000387f0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038800:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038800:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038810:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038810:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038820:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038820:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038830:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038830:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038840:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038840:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038850:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038850:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15344, 306 lines modified | Offset 15344, 306 lines modified | ||
| 0003bef0:·7461·7267·6574·3d22·2369·646d·3736·3336··target="#idm7636 | 0003bef0:·7461·7267·6574·3d22·2369·646d·3736·3336··target="#idm7636 | ||
| 0003bf00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003bf00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003bf10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003bf10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003bf20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003bf20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003bf30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003bf30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003bf40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003bf40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003bf50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003bf50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003bf60:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003bf70:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bf80:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bf90:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bfa0:·2069·643d·2269·646d·3736·3336·223e·3c70···id="idm7636"><p | |||
| 0003bfb0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003bfc0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003bfd0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003bfe0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003bff0:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003c000:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003c010:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003c020:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003c030:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003c040:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003c050:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003c060:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003c070:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003c080:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003c090:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003c0a0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003c0b0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003c0c0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003c0d0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003c0e0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003c0f0:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003c100:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003c110:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003c120:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003c130:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003c140:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003c150:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003c160:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003c170:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003c180:·200a·2020·2020·7975·6d20·7265·696e·7374···.····yum·reinst | |||
| 0003c190:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003c1a0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003c1b0:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003c1c0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c1d0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c1e0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c1f0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c200:·7461·7267·6574·3d22·2369·646d·3736·3337··target="#idm7637 | |||
| 0003c210:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c220:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c230:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c240:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c250:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c260:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003 | 0003c270:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003 | 0003c280:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003 | 0003c290:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003 | 0003c2a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003 | 0003c2b0:·7365·2220·6964·3d22·6964·6d37·3633·3722··se"·id="idm7637" | ||
| 0003 | 0003c2c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003 | 0003c2d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003 | 0003c2e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003 | 0003c2f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003 | 0003c300:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003c | 0003c310:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003c | 0003c320:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003c | 0003c330:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003c | 0003c340:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003c | 0003c350:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c | 0003c360:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003c | 0003c370:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003c | 0003c380:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003c | 0003c390:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003c | 0003c3a0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003c | 0003c3b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003c | 0003c3c0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003c | 0003c3d0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003c | 0003c3e0:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003c | 0003c3f0:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003c | 0003c400:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003c | 0003c410:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003c | 0003c420:·6d64·3a20·7975·6d20·7265·696e·7374·616c··md:·yum·reinstal | ||
| 0003c | 0003c430:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003c | 0003c440:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003c | 0003c450:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003c | 0003c460:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003c | 0003c470:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003c | 0003c480:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003c | 0003c490:·2043·4345·2d38·3038·3537·2d36·0a20·202d···CCE-80857-6.··- | ||
| 0003c | 0003c4a0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003c | 0003c4b0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003c | 0003c4c0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003c | 0003c4d0:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003c | 0003c4e0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003c | 0003c4f0:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003c | 0003c500:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003c | 0003c510:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c | 0003c520:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003c | 0003c530:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003c | 0003c540:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003c | 0003c550:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c | 0003c560:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003c | 0003c570:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003c | 0003c580:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003c | 0003c590:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003c | 0003c5a0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003c | 0003c5b0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003c | 0003c5c0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| Max diff block lines reached; 17274091/17316235 bytes (99.76%) of diff not shown. | |||
| Offset 57, 15 lines modified | Offset 57, 15 lines modified | ||
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 62 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 62 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 63 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 63 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 64 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 64 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 65 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 66 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 66 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 67 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 67 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 68 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 68 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 69 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 69 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 70 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 70 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 71 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 71 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 14 lines modified | Offset 121, 27 lines modified | ||
| 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 130 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 131 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 132 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 133 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 134 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 135 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 141 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 134 | ··set_fact: | 142 | ··set_fact: |
| Offset 260, 27 lines modified | Offset 273, 14 lines modified | ||
| 260 | ··-·PCI-DSSv4-11.5.2 | 273 | ··-·PCI-DSSv4-11.5.2 |
| 261 | ··-·high_complexity | 274 | ··-·high_complexity |
| 262 | ··-·high_severity | 275 | ··-·high_severity |
| 263 | ··-·medium_disruption | 276 | ··-·medium_disruption |
| 264 | ··-·no_reboot_needed | 277 | ··-·no_reboot_needed |
| 265 | ··-·restrict_strategy | 278 | ··-·restrict_strategy |
| 266 | ··-·rpm_verify_hashes | 279 | ··-·rpm_verify_hashes |
| 267 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 268 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 269 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 270 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 271 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 272 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 273 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 274 | fi | ||
| 275 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 280 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 276 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 281 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 277 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 282 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 278 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 283 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 279 | $·rpm·-qf·FILENAME | 284 | $·rpm·-qf·FILENAME |
| 280 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 285 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 302, 14 lines modified | Offset 302, 44 lines modified | ||
| 302 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 302 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 303 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 303 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 304 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 304 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 305 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 305 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 306 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 306 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 307 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 307 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 308 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 308 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 314 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 315 | declare·-A·SETPERMS_RPM_DICT | ||
| 316 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 317 | #·is·expected·by·the·RPM·database | ||
| 318 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 319 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 320 | do | ||
| 321 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 322 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 323 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 324 | ········do | ||
| 325 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 326 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 327 | ········done | ||
| 328 | done | ||
| 329 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 330 | #·correct·values | ||
| 331 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 332 | do | ||
| 333 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 334 | done | ||
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 336 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 337 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 338 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 339 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 314 | -·name:·Read·list·of·files·with·incorrect·permissions | 340 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 315 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 341 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 390, 44 lines modified | Offset 420, 14 lines modified | ||
| 390 | ··-·PCI-DSSv4-11.5.2 | 420 | ··-·PCI-DSSv4-11.5.2 |
| 391 | ··-·high_complexity | 421 | ··-·high_complexity |
| 392 | ··-·high_severity | 422 | ··-·high_severity |
| 393 | ··-·medium_disruption | 423 | ··-·medium_disruption |
| 394 | ··-·no_reboot_needed | 424 | ··-·no_reboot_needed |
| 395 | ··-·restrict_strategy | 425 | ··-·restrict_strategy |
| 396 | ··-·rpm_verify_permissions | 426 | ··-·rpm_verify_permissions |
| 397 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 398 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 399 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1348288/1356430 bytes (99.40%) of diff not shown. | |||
| Offset 14448, 16 lines modified | Offset 14448, 16 lines modified | ||
| 000386f0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 000386f0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038700:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038700:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038710:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038710:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038720:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038720:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038730:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038730:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038740:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038740:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038760:·2020·2861·7320·6f66·2032·3032·3 | 00038760:·2020·2861·7320·6f66·2032·3032·352d·3132····(as·of·2025-12 | ||
| 00038770:·2d3 | 00038770:·2d31·3129·0a20·2020·2020·2020·2020·2020··-11).··········· | ||
| 00038780:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038780:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038790:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038790:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 000387a0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 000387a0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 000387b0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 000387b0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 000387c0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 000387c0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 000387d0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 000387d0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 000387e0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 000387e0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15352, 306 lines modified | Offset 15352, 306 lines modified | ||
| 0003bf70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003bf70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003bf80:·3633·3622·2074·6162·696e·6465·783d·2230··636"·tabindex="0 | 0003bf80:·3633·3622·2074·6162·696e·6465·783d·2230··636"·tabindex="0 | ||
| 0003bf90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003bf90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bfa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003bfa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003bfb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003bfb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003bfc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003bfc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003bfd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003bfd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003bfe0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003bff0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003c000:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c010:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c020:·7365·2220·6964·3d22·6964·6d37·3633·3622··se"·id="idm7636" | |||
| 0003c030:·3e3c·7072·653e·3c63·6f64·653e·0a23·2046··><pre><code>.#·F | |||
| 0003c040:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | |||
| 0003c050:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | |||
| 0003c060:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | |||
| 0003c070:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | |||
| 0003c080:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | |||
| 0003c090:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | |||
| 0003c0a0:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | |||
| 0003c0b0:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | |||
| 0003c0c0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003c0d0:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | |||
| 0003c0e0:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | |||
| 0003c0f0:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | |||
| 0003c100:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | |||
| 0003c110:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | |||
| 0003c120:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003c130:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | |||
| 0003c140:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | |||
| 0003c150:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | |||
| 0003c160:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | |||
| 0003c170:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | |||
| 0003c180:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | |||
| 0003c190:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | |||
| 0003c1a0:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | |||
| 0003c1b0:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | |||
| 0003c1c0:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | |||
| 0003c1d0:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | |||
| 0003c1e0:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | |||
| 0003c1f0:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | |||
| 0003c200:·2020·2020·0a20·2020·2079·756d·2072·6569······.····yum·rei | |||
| 0003c210:·6e73·7461·6c6c·202d·7920·2470·6163·6b61··nstall·-y·$packa | |||
| 0003c220:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | |||
| 0003c230:·0a20·2020·200a·6669·0a3c·2f63·6f64·653e··.····.fi.</code> | |||
| 0003c240:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c250:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c260:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c270:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c280:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003c290:·3633·3722·2074·6162·696e·6465·783d·2230··637"·tabindex="0 | |||
| 0003c2a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c2b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c2c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c2d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c2e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003 | 0003c2f0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003 | 0003c300:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003c | 0003c310:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003c | 0003c320:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003c | 0003c330:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | ||
| 0003c | 0003c340:·3337·223e·3c74·6162·6c65·2063·6c61·7373··37"><table·class | ||
| 0003c | 0003c350:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003c | 0003c360:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003c | 0003c370:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003c | 0003c380:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003c | 0003c390:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003c | 0003c3a0:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003c | 0003c3b0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003c | 0003c3c0:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003c | 0003c3d0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003c | 0003c3e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003c | 0003c3f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003c | 0003c400:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003c | 0003c410:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003c | 0003c420:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003c | 0003c430:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003c | 0003c440:·653e·2d20·6e61·6d65·3a20·2753·6574·2066··e>-·name:·'Set·f | ||
| 0003c | 0003c450:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | ||
| 0003c | 0003c460:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | ||
| 0003c | 0003c470:·6f6d·6d61·6e64·270a·2020·7365·745f·6661··ommand'.··set_fa | ||
| 0003c | 0003c480:·6374·3a0a·2020·2020·7061·636b·6167·655f··ct:.····package_ | ||
| 0003c | 0003c490:·6d61·6e61·6765·725f·7265·696e·7374·616c··manager_reinstal | ||
| 0003c | 0003c4a0:·6c5f·636d·643a·2079·756d·2072·6569·6e73··l_cmd:·yum·reins | ||
| 0003c | 0003c4b0:·7461·6c6c·202d·790a·2020·7768·656e·3a20··tall·-y.··when:· | ||
| 0003c | 0003c4c0:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| 0003c | 0003c4d0:·7469·6f6e·2069·6e20·5b20·2246·6564·6f72··tion·in·[·"Fedor | ||
| 0003c | 0003c4e0:·6122·2c20·2252·6564·4861·7422·2c20·2243··a",·"RedHat",·"C | ||
| 0003c | 0003c4f0:·656e·744f·5322·2c20·224f·7261·636c·654c··entOS",·"OracleL | ||
| 0003c | 0003c500:·696e·7578·2220·5d0a·2020·7461·6773·3a0a··inux"·].··tags:. | ||
| 0003c | 0003c510:·2020·2d20·4343·452d·3830·3835·372d·360a····-·CCE-80857-6. | ||
| 0003c | 0003c520:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003c | 0003c530:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003c | 0003c540:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003c | 0003c550:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003c | 0003c560:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c | 0003c570:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003c | 0003c580:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003c | 0003c590:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c | 0003c5a0:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003c | 0003c5b0:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003c | 0003c5c0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c | 0003c5d0:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003c | 0003c5e0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003c | 0003c5f0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003c | 0003c600:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003c | 0003c610:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003c | 0003c620:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003c | 0003c630:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003c | 0003c640:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| Max diff block lines reached; 10009829/10051973 bytes (99.58%) of diff not shown. | |||
| Offset 55, 15 lines modified | Offset 55, 15 lines modified | ||
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 60 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 61 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 61 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 62 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 62 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 63 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 64 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 64 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 65 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 65 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 66 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 66 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 67 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 68 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 68 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 69 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 69 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 14 lines modified | Offset 122, 27 lines modified | ||
| 122 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 122 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 123 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 123 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 124 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 125 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 125 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 131 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 132 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 133 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 134 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 135 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 136 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 134 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 142 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 135 | ··set_fact: | 143 | ··set_fact: |
| Offset 261, 27 lines modified | Offset 274, 14 lines modified | ||
| 261 | ··-·PCI-DSSv4-11.5.2 | 274 | ··-·PCI-DSSv4-11.5.2 |
| 262 | ··-·high_complexity | 275 | ··-·high_complexity |
| 263 | ··-·high_severity | 276 | ··-·high_severity |
| 264 | ··-·medium_disruption | 277 | ··-·medium_disruption |
| 265 | ··-·no_reboot_needed | 278 | ··-·no_reboot_needed |
| 266 | ··-·restrict_strategy | 279 | ··-·restrict_strategy |
| 267 | ··-·rpm_verify_hashes | 280 | ··-·rpm_verify_hashes |
| 268 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 269 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 270 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 271 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 272 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 273 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 274 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 275 | fi | ||
| 276 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 281 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 277 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 282 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 278 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 283 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 279 | run·the·following·command·to·determine·which·package·owns·it: | 284 | run·the·following·command·to·determine·which·package·owns·it: |
| 280 | $·rpm·-qf·FILENAME | 285 | $·rpm·-qf·FILENAME |
| 281 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 286 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 282 | $·sudo·rpm·--setugids·PACKAGENAME | 287 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 301, 14 lines modified | Offset 301, 40 lines modified | ||
| 301 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 301 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 302 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 302 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 303 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 303 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 304 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 304 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 305 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 305 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 306 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 306 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 307 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 307 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 313 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 314 | declare·-A·SETPERMS_RPM_DICT | ||
| 315 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 316 | #·is·expected·by·the·RPM·database | ||
| 317 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 318 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 319 | do | ||
| 320 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 321 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 322 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 323 | done | ||
| 324 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 325 | #·correct·values | ||
| 326 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 327 | do | ||
| 328 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 329 | done | ||
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 313 | -·name:·Read·list·of·files·with·incorrect·ownership | 335 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 314 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 336 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 386, 40 lines modified | Offset 412, 14 lines modified | ||
| 386 | ··-·PCI-DSSv4-11.5.2 | 412 | ··-·PCI-DSSv4-11.5.2 |
| 387 | ··-·high_complexity | 413 | ··-·high_complexity |
| 388 | ··-·high_severity | 414 | ··-·high_severity |
| 389 | ··-·medium_disruption | 415 | ··-·medium_disruption |
| 390 | ··-·no_reboot_needed | 416 | ··-·no_reboot_needed |
| 391 | ··-·restrict_strategy | 417 | ··-·restrict_strategy |
| 392 | ··-·rpm_verify_ownership | 418 | ··-·rpm_verify_ownership |
| 393 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 394 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 395 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 396 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 397 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 398 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1047381/1055139 bytes (99.26%) of diff not shown. | |||
| Offset 14442, 15 lines modified | Offset 14442, 15 lines modified | ||
| 00038690:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038690:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000386a0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000386a0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000386b0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000386b0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000386c0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000386c0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 000386d0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 000386d0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 000386e0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 000386e0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 000386f0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 000386f0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038700:·6173·206f·6620·3230·323 | 00038700:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00038710:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038710:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038720:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038720:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038730:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038730:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038740:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038740:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038750:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038750:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038760:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038760:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038770:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038770:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15257, 236 lines modified | Offset 15257, 236 lines modified | ||
| 0003b980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b990:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | 0003b990:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | ||
| 0003b9a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b9a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b9b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b9b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b9c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b9c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b9d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b9d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b9e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b9e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b9f0:·6564·6961·7469·6f6e·20 | 0003b9f0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | ||
| 0003ba00:· | 0003ba00:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003ba10:· | 0003ba10:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003ba20:· | 0003ba20:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003ba30:·6 | 0003ba30:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 0003ba40:· | 0003ba40:·3938·3022·3e3c·7461·626c·6520·636c·6173··980"><table·clas | ||
| 0003ba50:· | 0003ba50:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003ba60:· | 0003ba60:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003ba70:·6 | 0003ba70:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003ba80:·6 | 0003ba80:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003ba90:· | 0003ba90:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003baa0:· | 0003baa0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003bab0:· | 0003bab0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003bac0:· | 0003bac0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003bad0:· | 0003bad0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bae0:· | 0003bae0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003baf0:· | 0003baf0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003bb00:· | 0003bb00:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003bb10:· | 0003bb10:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003bb20:· | 0003bb20:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003bb30:·6 | 0003bb30:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | ||
| 0003bb40:·7061·636b·6167·6520·2d2d·6164·643d·6169··package·--add=ai | |||
| 0003bb | 0003bb40:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | ||
| 0003bb50:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003bb60:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003bb70:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003bb80:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003bb90:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003bba0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003bbb0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003bbc0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003bbd0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003bbe0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003bbf0:·3d22·2369·646d·3739·3831·2220·7461·6269··="#idm7981"·tabi | |||
| 0003bc00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003bc10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bc20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003bc30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bc40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bc50:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003bc60:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003bc70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bc80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bc90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bca0:·646d·3739·3831·223e·3c74·6162·6c65·2063··dm7981"><table·c | |||
| 0003bcb0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bcc0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bcd0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bce0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bcf0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bd00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd10:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bd20:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bd30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bd40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bd50:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003bd60:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003bd70:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003bd80:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003bd90:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bda0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003bdb0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003bdc0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003bdd0:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 0003bde0:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 0003bdf0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 0003be00:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | |||
| 0003be10:·6e76·205d·3b20·7468·656e·0a0a·6966·2021··nv·];·then..if·! | |||
| 0003be20:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003be30:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 0003be40:·2020·7975·6d20·696e·7374·616c·6c20·2d79····yum·install·-y | |||
| 0003be50:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 0003be60:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003be70:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003be80:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003be90:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003bea0:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003beb0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bec0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bed0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bee0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bef0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bf00:·3739·3832·2220·7461·6269·6e64·6578·3d22··7982"·tabindex=" | |||
| 0003bf10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bf20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bf30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bf40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bf50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bf60:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003bf70:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bf80:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bf90:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bfa0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003bfb0:·3938·3222·3e3c·7461·626c·6520·636c·6173··982"><table·clas | |||
| 0003bfc0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bfd0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bfe0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bff0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c000:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c010:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c020:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c030:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c040:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c050:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| Max diff block lines reached; 9165599/9197945 bytes (99.65%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 66 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 67 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 33 lines modified | Offset 114, 41 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8c_\x8i_\x8s············5.3.1 | 118 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | package·--add=aide | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | include·install_aide | 126 | include·install_aide |
| 133 | class·install_aide·{ | 127 | class·install_aide·{ |
| 134 | ··package·{·'aide': | 128 | ··package·{·'aide': |
| 135 | ····ensure·=>·'installed', | 129 | ····ensure·=>·'installed', |
| 136 | ··} | 130 | ··} |
| 137 | } | 131 | } |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 139 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 140 | ····yum·install·-y·"aide" | ||
| 141 | fi | ||
| 142 | else | ||
| 143 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 144 | fi | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Ensure·aide·is·installed | 150 | -·name:·Ensure·aide·is·installed |
| 144 | ··package: | 151 | ··package: |
| Offset 161, 36 lines modified | Offset 169, 28 lines modified | ||
| 161 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 162 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 164 | [[packages]] | 172 | [[packages]] |
| 165 | name·=·"aide" | 173 | name·=·"aide" |
| 166 | version·=·"*" | 174 | version·=·"*" |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 174 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 175 | ····yum·install·-y·"aide" | ||
| 176 | fi | ||
| 180 | package·install·aide | ||
| 177 | else | ||
| 178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 179 | fi | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | package· | 186 | package·--add=aide |
| 186 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 187 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 187 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 188 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 188 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 189 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 189 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 190 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 207, 14 lines modified | Offset 207, 27 lines modified | ||
| 207 | ·············_\x8i_\x8s_\x8m······1446 | 207 | ·············_\x8i_\x8s_\x8m······1446 |
| 208 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 208 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 209 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 209 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 210 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 210 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 211 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 211 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 212 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 212 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 215 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 216 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 217 | fips-mode-setup·--enable | ||
| 218 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 219 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 220 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 221 | fi | ||
| 222 | else | ||
| 223 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 224 | fi | ||
| 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| Max diff block lines reached; 1258629/1264963 bytes (99.50%) of diff not shown. | |||
| Offset 14437, 15 lines modified | Offset 14437, 15 lines modified | ||
| 00038640:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038640:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038650:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038650:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038660:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038660:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038670:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038670:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038680:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038680:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038690:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038690:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 000386a0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 000386a0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 000386b0:·3032·3 | 000386b0:·3032·352d·3132·2d31·3129·0a20·2020·2020··025-12-11).····· | ||
| 000386c0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 000386c0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000386d0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000386d0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000386e0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000386e0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000386f0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000386f0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00038700:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00038700:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038710:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038710:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038720:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038720:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15344, 306 lines modified | Offset 15344, 306 lines modified | ||
| 0003bef0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003bef0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003bf00:·6964·6d37·3633·3622·2074·6162·696e·6465··idm7636"·tabinde | 0003bf00:·6964·6d37·3633·3622·2074·6162·696e·6465··idm7636"·tabinde | ||
| 0003bf10:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003bf10:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003bf20:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003bf20:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003bf30:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003bf30:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003bf40:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003bf40:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003bf50:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003bf50:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003bf60:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003bf70:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003bf80:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bf90:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bfa0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003bfb0:·3633·3622·3e3c·7072·653e·3c63·6f64·653e··636"><pre><code> | |||
| 0003bfc0:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | |||
| 0003bfd0:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | |||
| 0003bfe0:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | |||
| 0003bff0:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | |||
| 0003c000:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | |||
| 0003c010:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | |||
| 0003c020:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | |||
| 0003c030:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | |||
| 0003c040:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003c050:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | |||
| 0003c060:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | |||
| 0003c070:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | |||
| 0003c080:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | |||
| 0003c090:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | |||
| 0003c0a0:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003c0b0:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | |||
| 0003c0c0:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | |||
| 0003c0d0:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | |||
| 0003c0e0:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | |||
| 0003c0f0:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | |||
| 0003c100:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | |||
| 0003c110:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | |||
| 0003c120:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | |||
| 0003c130:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | |||
| 0003c140:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | |||
| 0003c150:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | |||
| 0003c160:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003c170:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | |||
| 0003c180:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | |||
| 0003c190:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | |||
| 0003c1a0:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | |||
| 0003c1b0:·7461·6c6c·0a20·2020·200a·6669·0a3c·2f63··tall.····.fi.</c | |||
| 0003c1c0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c1d0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003c1e0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003c1f0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c200:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c210:·6964·6d37·3633·3722·2074·6162·696e·6465··idm7637"·tabinde | |||
| 0003c220:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c230:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c240:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c250:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c260:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003 | 0003c270:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003 | 0003c280:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003 | 0003c290:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003 | 0003c2a0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003 | 0003c2b0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003 | 0003c2c0:·646d·3736·3337·223e·3c74·6162·6c65·2063··dm7637"><table·c | ||
| 0003 | 0003c2d0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003 | 0003c2e0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003 | 0003c2f0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003 | 0003c300:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003c | 0003c310:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003c | 0003c320:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003c | 0003c330:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003c | 0003c340:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003c | 0003c350:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003c | 0003c360:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003c | 0003c370:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003c | 0003c380:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003c | 0003c390:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003c | 0003c3a0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003c | 0003c3b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003c | 0003c3c0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·2753··<code>-·name:·'S | ||
| 0003c | 0003c3d0:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003c | 0003c3e0:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003c | 0003c3f0:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003c | 0003c400:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003c | 0003c410:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003c | 0003c420:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003c | 0003c430:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003c | 0003c440:·656e·3a20·616e·7369·626c·655f·6469·7374··en:·ansible_dist | ||
| 0003c | 0003c450:·7269·6275·7469·6f6e·2069·6e20·5b20·2246··ribution·in·[·"F | ||
| 0003c | 0003c460:·6564·6f72·6122·2c20·2252·6564·4861·7422··edora",·"RedHat" | ||
| 0003c | 0003c470:·2c20·2243·656e·744f·5322·2c20·224f·7261··,·"CentOS",·"Ora | ||
| 0003c | 0003c480:·636c·654c·696e·7578·2220·5d0a·2020·7461··cleLinux"·].··ta | ||
| 0003c | 0003c490:·6773·3a0a·2020·2d20·4343·452d·3830·3835··gs:.··-·CCE-8085 | ||
| 0003c | 0003c4a0:·372d·360a·2020·2d20·434a·4953·2d35·2e31··7-6.··-·CJIS-5.1 | ||
| 0003c | 0003c4b0:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003c | 0003c4c0:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003c | 0003c4d0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003c | 0003c4e0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003c | 0003c4f0:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003c | 0003c500:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003c | 0003c510:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003c | 0003c520:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003c | 0003c530:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003c | 0003c540:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c | 0003c550:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003c | 0003c560:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003c | 0003c570:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003c | 0003c580:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003c | 0003c590:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003c | 0003c5a0:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003c | 0003c5b0:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003c | 0003c5c0:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003c | 0003c5d0:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| Max diff block lines reached; 17218231/17260237 bytes (99.76%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 14 lines modified | Offset 121, 27 lines modified | ||
| 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 130 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 131 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 132 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 133 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 134 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 135 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 141 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 134 | ··set_fact: | 142 | ··set_fact: |
| Offset 260, 27 lines modified | Offset 273, 14 lines modified | ||
| 260 | ··-·PCI-DSSv4-11.5.2 | 273 | ··-·PCI-DSSv4-11.5.2 |
| 261 | ··-·high_complexity | 274 | ··-·high_complexity |
| 262 | ··-·high_severity | 275 | ··-·high_severity |
| 263 | ··-·medium_disruption | 276 | ··-·medium_disruption |
| 264 | ··-·no_reboot_needed | 277 | ··-·no_reboot_needed |
| 265 | ··-·restrict_strategy | 278 | ··-·restrict_strategy |
| 266 | ··-·rpm_verify_hashes | 279 | ··-·rpm_verify_hashes |
| 267 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 268 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 269 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 270 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 271 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 272 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 273 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 274 | fi | ||
| 275 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 280 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 276 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 281 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 277 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 282 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 278 | run·the·following·command·to·determine·which·package·owns·it: | 283 | run·the·following·command·to·determine·which·package·owns·it: |
| 279 | $·rpm·-qf·FILENAME | 284 | $·rpm·-qf·FILENAME |
| 280 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 285 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 281 | $·sudo·rpm·--setugids·PACKAGENAME | 286 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 300, 14 lines modified | Offset 300, 40 lines modified | ||
| 300 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 300 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 301 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 301 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 302 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 302 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 303 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 303 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 304 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 304 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 305 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 305 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 306 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 306 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 312 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 313 | declare·-A·SETPERMS_RPM_DICT | ||
| 314 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 315 | #·is·expected·by·the·RPM·database | ||
| 316 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 317 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 318 | do | ||
| 319 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 320 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 321 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 322 | done | ||
| 323 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 324 | #·correct·values | ||
| 325 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 326 | do | ||
| 327 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 328 | done | ||
| 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 312 | -·name:·Read·list·of·files·with·incorrect·ownership | 334 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 313 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 335 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 385, 40 lines modified | Offset 411, 14 lines modified | ||
| 385 | ··-·PCI-DSSv4-11.5.2 | 411 | ··-·PCI-DSSv4-11.5.2 |
| 386 | ··-·high_complexity | 412 | ··-·high_complexity |
| 387 | ··-·high_severity | 413 | ··-·high_severity |
| 388 | ··-·medium_disruption | 414 | ··-·medium_disruption |
| 389 | ··-·no_reboot_needed | 415 | ··-·no_reboot_needed |
| 390 | ··-·restrict_strategy | 416 | ··-·restrict_strategy |
| 391 | ··-·rpm_verify_ownership | 417 | ··-·rpm_verify_ownership |
| 392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 393 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 394 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 395 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 396 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 397 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1669756/1677394 bytes (99.54%) of diff not shown. | |||
| Offset 14446, 15 lines modified | Offset 14446, 15 lines modified | ||
| 000386d0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000386d0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 000386e0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 000386e0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 000386f0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 000386f0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038700:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038700:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038710:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038710:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038720:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038720:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038730:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038730:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038740:·206f·6620·3230·323 | 00038740:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038760:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038760:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038770:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038770:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038780:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038780:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038790:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038790:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000387a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000387a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000387b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000387b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15284, 236 lines modified | Offset 15284, 236 lines modified | ||
| 0003bb30:·7267·6574·3d22·2369·646d·3739·3830·2220··rget="#idm7980"· | 0003bb30:·7267·6574·3d22·2369·646d·3739·3830·2220··rget="#idm7980"· | ||
| 0003bb40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bb40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bb50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bb50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bb60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bb60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bb70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bb70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bb80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bb80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bb90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bb90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bba0:·6e20· | 0003bba0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | ||
| 0003bbb0:· | 0003bbb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003bbc0:· | 0003bbc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003bbd0:·6 | 0003bbd0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003bbe0:· | 0003bbe0:·2069·643d·2269·646d·3739·3830·223e·3c74···id="idm7980"><t | ||
| 0003bbf0:· | 0003bbf0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003bc00:·6 | 0003bc00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003bc10:· | 0003bc10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003bc20:· | 0003bc20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003bc30:· | 0003bc30:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003bc40:·7 | 0003bc40:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003bc50:· | 0003bc50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bc60:· | 0003bc60:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003bc70:· | 0003bc70:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003bc80:· | 0003bc80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003bc90:· | 0003bc90:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003bca0:· | 0003bca0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bcb0:· | 0003bcb0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003bcc0:· | 0003bcc0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | ||
| 0003bcd0:· | 0003bcd0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003bce0:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003bcf0:·202d·2d61·6464·3d61·6964·650a·3c2f·636f···--add=aide.</co | |||
| 0003bd00:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bd10:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bd20:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003bd30:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bd40:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bd50:·646d·3739·3831·2220·7461·6269·6e64·6578··dm7981"·tabindex | |||
| 0003bd60:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bd70:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bd80:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bd90:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bda0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003bdb0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003bdc0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bdd0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bde0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bdf0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003be00:·3739·3831·223e·3c74·6162·6c65·2063·6c61··7981"><table·cla | |||
| 0003be10:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003be20:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003be30:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003be40:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003be50:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003be60:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b | 0003bce0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | ||
| 0003bcf0:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003bd00:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003bd10:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003bd20:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003bd30:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003bd40:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003bd50:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bd60:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bd70:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bd80:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bd90:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003bda0:·3938·3122·2074·6162·696e·6465·783d·2230··981"·tabindex="0 | |||
| 0003bdb0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bdc0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bdd0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bde0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bdf0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003be00:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003be10:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003be20:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003be30:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003be40:·7365·2220·6964·3d22·6964·6d37·3938·3122··se"·id="idm7981" | |||
| 0003be50:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003be60:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003be70:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003be80:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003be90:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003be | 0003bea0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003be | 0003beb0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003bea0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003beb0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bec0:·3 | 0003bec0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003bed0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bee0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003be | 0003bef0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003bee0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003bef0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003bf00:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003bf10:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003bf20:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003bf30:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003bf40:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003bf | 0003bf00:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003bf10:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003bf20:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003bf30:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003bf40:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003bf50:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003bf60:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003bf70:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003bf80:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | |||
| 0003bf90:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0003bfa0:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | |||
| 0003bfb0:·6f6e·7461·696e·6572·656e·7620·5d3b·2074··ontainerenv·];·t | |||
| 0003bfc0:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003bfd0:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003bfe0:·3b20·7468·656e·0a20·2020·2079·756d·2069··;·then.····yum·i | |||
| 0003bff0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| Max diff block lines reached; 28872000/28904346 bytes (99.89%) of diff not shown. | |||
| Offset 14470, 16 lines modified | Offset 14470, 16 lines modified | ||
| 00038850:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038850:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038860:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038860:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038870:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038870:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038880:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038880:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038890:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038890:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000388a0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000388a0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000388b0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000388b0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000388c0:·2028·6173·206f·6620·3230·323 | 000388c0:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 000388d0:·3 | 000388d0:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 000388e0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 000388e0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000388f0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000388f0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00038900:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00038900:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038910:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038910:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038920:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038920:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038930:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038930:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038940:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038940:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15303, 236 lines modified | Offset 15303, 236 lines modified | ||
| 0003bc60:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | 0003bc60:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | ||
| 0003bc70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bc70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bc80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bc80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003bc90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003bc90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bca0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003bca0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003bcb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003bcb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bcc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003bcc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bcd0:·6f6e·20 | 0003bcd0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | ||
| 0003bce0:·7 | 0003bce0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003bcf0:· | 0003bcf0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003bd00:· | 0003bd00:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003bd10:· | 0003bd10:·2220·6964·3d22·6964·6d37·3938·3022·3e3c··"·id="idm7980">< | ||
| 0003bd20:· | 0003bd20:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003bd30:·6 | 0003bd30:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003bd40:· | 0003bd40:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003bd50:· | 0003bd50:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003bd60:· | 0003bd60:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003bd70:·6 | 0003bd70:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003bd80:· | 0003bd80:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bd90:· | 0003bd90:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003bda0:· | 0003bda0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003bdb0:· | 0003bdb0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003bdc0:· | 0003bdc0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003bdd0:· | 0003bdd0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bde0:· | 0003bde0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003bdf0:· | 0003bdf0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003be00:· | 0003be00:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003be10:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003be20:·6520·2d2d·6164·643d·6169·6465·0a3c·2f63··e·--add=aide.</c | |||
| 0003be30:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003be40:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003be50:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003be60:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003be70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003be80:·6964·6d37·3938·3122·2074·6162·696e·6465··idm7981"·tabinde | |||
| 0003be90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bea0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003beb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bec0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bed0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bee0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003bef0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003bf00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bf10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bf20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bf30:·6d37·3938·3122·3e3c·7461·626c·6520·636c··m7981"><table·cl | |||
| 0003bf40:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003bf50:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003bf60:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003bf70:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003bf80:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003bf90:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003be10:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | ||
| 0003be20:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003be30:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003be40:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003be50:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003be60:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003be70:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003be80:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003be90:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bea0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003beb0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bec0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bed0:·3739·3831·2220·7461·6269·6e64·6578·3d22··7981"·tabindex=" | |||
| 0003bee0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bef0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bf00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bf10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bf20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bf30:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003bf40:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003bf50:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bf60:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bf70:·7073·6522·2069·643d·2269·646d·3739·3831··pse"·id="idm7981 | |||
| 0003bf80:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bf90:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bfa0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bfb0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bfc0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bf | 0003bfd0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003bf | 0003bfe0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003bfd0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bfe0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bff0:· | 0003bff0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003c000:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c010:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003c0 | 0003c020:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003c010:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003c020:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003c030:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003c040:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003c050:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003c060:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003c070:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003c0 | 0003c030:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003c040:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c050:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c060:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c070:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003c080:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003c090:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003c0a0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003c0b0:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | |||
| 0003c0c0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003c0d0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | |||
| 0003c0e0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | |||
| 0003c0f0:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003c100:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003c110:·203b·2074·6865·6e0a·2020·2020·7975·6d20···;·then.····yum· | |||
| Max diff block lines reached; 28721294/28753778 bytes (99.89%) of diff not shown. | |||
| Offset 14316, 16 lines modified | Offset 14316, 16 lines modified | ||
| 00037eb0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037eb0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ec0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ec0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ed0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ed0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ee0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ee0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037ef0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037ef0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f00:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f00:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f10:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f10:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f20:·2861·7320·6f66·2032·3032·3 | 00037f20:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00037f30:·3 | 00037f30:·3029·0a20·2020·2020·2020·2020·2020·2020··0).············· | ||
| 00037f40:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f40:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f50:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f50:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f60:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f60:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f70:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f70:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f80:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f80:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037f90:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037f90:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fa0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fa0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15108, 236 lines modified | Offset 15108, 236 lines modified | ||
| 0003b030:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b030:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b040:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | 0003b040:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | ||
| 0003b050:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b050:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b060:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b060:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b070:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b070:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b080:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b080:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b090:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b090:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b0a0:·656d·6564·6961·7469·6f6e·20 | 0003b0a0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003b0b0:· | 0003b0b0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003b0c0:· | 0003b0c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b0d0:· | 0003b0d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b0e0:·6 | 0003b0e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b0f0:·6 | 0003b0f0:·6d38·3430·3622·3e3c·7461·626c·6520·636c··m8406"><table·cl | ||
| 0003b100:·6 | 0003b100:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b110:· | 0003b110:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b120:· | 0003b120:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b130:·6 | 0003b130:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b140:· | 0003b140:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b150:· | 0003b150:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b160:· | 0003b160:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b170:·7 | 0003b170:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b180:· | 0003b180:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b190:· | 0003b190:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b1a0:· | 0003b1a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b1b0:· | 0003b1b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b1c0:· | 0003b1c0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b1d0:·6 | 0003b1d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b1e0:· | 0003b1e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | ||
| 0003b1f0:·3e0a·7061·636b·6167·6520·2d2d·6164·643d··>.package·--add= | |||
| 0003b200:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 0003b210:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b220:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b230:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b240:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b250:·6172·6765·743d·2223·6964·6d38·3430·3722··arget="#idm8407" | |||
| 0003b260:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b270:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b280:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b290:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b2a0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b2b0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b2c0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b2d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b2e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b2f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b300:·2220·6964·3d22·6964·6d38·3430·3722·3e3c··"·id="idm8407">< | |||
| 0003b310:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b320:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b330:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b340:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b350:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b360:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b370:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b | 0003b1f0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | ||
| 0003b200:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b210:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b220:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b230:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b240:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b250:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b260:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b270:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b280:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b290:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b2a0:·6574·3d22·2369·646d·3834·3037·2220·7461··et="#idm8407"·ta | |||
| 0003b2b0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b2c0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b2d0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b2e0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b2f0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b300:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b310:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b320:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b330:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b340:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b350:·2269·646d·3834·3037·223e·3c74·6162·6c65··"idm8407"><table | |||
| 0003b360:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b370:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b380:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b390:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b3a0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b3 | 0003b3b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b3 | 0003b3c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b3 | 0003b3d0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b3 | 0003b3e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b3d0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b3e0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b3f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b400:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b410:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b420:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b430:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b440:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b450:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b | 0003b3f0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b400:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b410:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b420:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b430:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b440:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b450:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003b460:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003b470:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003b480:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003b490:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003b4a0:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003b4b0:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003b4c0:·7265·6e76·205d·3b20·7468·656e·0a0a·6966··renv·];·then..if | |||
| 0003b4d0:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003b4e0:·7420·2261·6964·6522·203b·2074·6865·6e0a··t·"aide"·;·then. | |||
| Max diff block lines reached; 22102382/22134866 bytes (99.85%) of diff not shown. | |||
| Offset 14315, 16 lines modified | Offset 14315, 16 lines modified | ||
| 00037ea0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ea0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037eb0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037eb0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ec0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ec0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ed0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ed0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037ee0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037ee0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037ef0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037ef0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·2861·7320·6f66·2032·3032·3 | 00037f10:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00037f20:·3 | 00037f20:·3029·0a20·2020·2020·2020·2020·2020·2020··0).············· | ||
| 00037f30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037f80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037f80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037f90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037f90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15113, 237 lines modified | Offset 15113, 237 lines modified | ||
| 0003b080:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b080:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b090:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | 0003b090:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | ||
| 0003b0a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b0a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b0b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b0b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b0c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b0c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0f0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b0f0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003b100:· | 0003b100:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | ||
| 0003b110:· | 0003b110:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b120:· | 0003b120:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b130:· | 0003b130:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b140:· | 0003b140:·2269·646d·3834·3036·223e·3c74·6162·6c65··"idm8406"><table | ||
| 0003b150:· | 0003b150:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b160:· | 0003b160:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b170:·6 | 0003b170:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b180:· | 0003b180:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b190:· | 0003b190:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b1a0:· | 0003b1a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b1b0:· | 0003b1b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b1c0:· | 0003b1c0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b1d0:· | 0003b1d0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b1e0:· | 0003b1e0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b1f0:· | 0003b1f0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b200:· | 0003b200:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b210:· | 0003b210:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b220:· | 0003b220:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003b230:· | 0003b230:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b240:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 0003b250:·6464·3d61·6964·650a·3c2f·636f·6465·3e3c··dd=aide.</code>< | |||
| 0003b260:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b270:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b2 | 0003b240:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | ||
| 0003b250:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b260:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b270:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b280:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b290:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b2a0:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003b2b0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b2c0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b2d0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b2e0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b2f0:·6172·6765·743d·2223·6964·6d38·3430·3722··arget="#idm8407" | |||
| 0003b300:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b310:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b320:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b330:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b340:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b350:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b360:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b370:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b380:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b390:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b3a0:·6964·3d22·6964·6d38·3430·3722·3e3c·7461··id="idm8407"><ta | |||
| 0003b3b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b3c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b3d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b3e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b3f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b400:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b410:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b420:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b430:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b440:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b450:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b460:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b470:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b480:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b490:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b4a0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003b4b0:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003b4c0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003b4d0:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 0003b4e0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003b4f0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003b500:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003b510:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0003b520:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003b530:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003b540:·656e·0a20·2020·2064·6e66·2069·6e73·7461··en.····dnf·insta | |||
| 0003b550:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 0003b560:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b570:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b580:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b590:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b5a0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b5b0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b5c0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b5d0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b5e0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b5f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b600:·2223·6964·6d38·3430·3822·2074·6162·696e··"#idm8408"·tabin | |||
| 0003b610:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b620:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b630:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b640:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b650:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b660:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b670:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b680:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b690:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b | 0003b6a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b2a0:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b2b0:·3037·2220·7461·6269·6e64·6578·3d22·3022··07"·tabindex="0" | |||
| 0003b2c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b2d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b2e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b2f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b300:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| Max diff block lines reached; 22528283/22560905 bytes (99.86%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2861·7320·6f66·2032·3032·3 | 00037f30:·2861·7320·6f66·2032·3032·352d·3132·2d31··(as·of·2025-12-1 | ||
| 00037f40:·3 | 00037f40:·3029·0a20·2020·2020·2020·2020·2020·2020··0).············· | ||
| 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15104, 236 lines modified | Offset 15104, 236 lines modified | ||
| 0003aff0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003aff0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b000:·3834·3036·2220·7461·6269·6e64·6578·3d22··8406"·tabindex=" | 0003b000:·3834·3036·2220·7461·6269·6e64·6578·3d22··8406"·tabindex=" | ||
| 0003b010:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b010:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b020:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b020:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b030:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b030:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b040:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b040:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b050:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b050:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b060:·6469·6174·696f·6e20· | 0003b060:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003b070:· | 0003b070:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b080:· | 0003b080:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b090:· | 0003b090:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b0a0:·6 | 0003b0a0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | ||
| 0003b0b0:·3 | 0003b0b0:·3036·223e·3c74·6162·6c65·2063·6c61·7373··06"><table·class | ||
| 0003b0c0:· | 0003b0c0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b0d0:·7 | 0003b0d0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b0e0:· | 0003b0e0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b0f0:·6 | 0003b0f0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b100:· | 0003b100:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b110:· | 0003b110:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b120:· | 0003b120:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b130:·6 | 0003b130:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b140:· | 0003b140:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b150:· | 0003b150:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b160:·6 | 0003b160:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b170:· | 0003b170:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b180:· | 0003b180:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003b190:· | 0003b190:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b1a0:· | 0003b1a0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | ||
| 0003b1b0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b1c0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b1d0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b1e0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b1f0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b200:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b210:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b1b0:·6163·6b61·6765·202d·2d61·6464·3d61·6964··ackage·--add=aid | |||
| 0003b1c0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003b1d0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b1e0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b1f0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b200:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b210:·6574·3d22·2369·646d·3834·3037·2220·7461··et="#idm8407"·ta | |||
| 0003b220:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b230:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b240:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b250:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b260:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b270:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b280:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b290:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b2a0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b2b0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b2c0:·643d·2269·646d·3834·3037·223e·3c74·6162··d="idm8407"><tab | |||
| 0003b2 | 0003b220:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b2e0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b2f0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b300:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b310:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b320:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b330:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b | 0003b230:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b240:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b250:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b260:·2223·6964·6d38·3430·3722·2074·6162·696e··"#idm8407"·tabin | |||
| 0003b270:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b280:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b290:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b2a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b2b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b2c0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b2d0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b2e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b2f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b300:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b310:·6d38·3430·3722·3e3c·7461·626c·6520·636c··m8407"><table·cl | |||
| 0003b320:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b330:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b340:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b350:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b360:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b3 | 0003b370:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b360:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b3 | 0003b380:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b390:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b3 | 0003b3a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b390:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b3a0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b3b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b3c0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b3d0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b3e0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b3f0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b400:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b410:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b | 0003b3b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b3c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b3d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b3e0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b3f0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b400:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003b410:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003b420:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003b430:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003b440:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003b450:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003b460:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003b470:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003b480:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 0003b490:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003b4a0:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| Max diff block lines reached; 9268157/9300641 bytes (99.65%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 119, 33 lines modified | Offset 119, 41 lines modified | ||
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 122 | ·············_\x8c_\x8i_\x8s············6.1.1 | 122 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package·--add=aide | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | include·install_aide | 131 | include·install_aide |
| 138 | class·install_aide·{ | 132 | class·install_aide·{ |
| 139 | ··package·{·'aide': | 133 | ··package·{·'aide': |
| 140 | ····ensure·=>·'installed', | 134 | ····ensure·=>·'installed', |
| 141 | ··} | 135 | ··} |
| 142 | } | 136 | } |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 144 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 145 | ····dnf·install·-y·"aide" | ||
| 146 | fi | ||
| 147 | else | ||
| 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 149 | fi | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | -·name:·Ensure·aide·is·installed | 155 | -·name:·Ensure·aide·is·installed |
| 149 | ··package: | 156 | ··package: |
| Offset 166, 36 lines modified | Offset 174, 28 lines modified | ||
| 166 | ··-·no_reboot_needed | 174 | ··-·no_reboot_needed |
| 167 | ··-·package_aide_installed | 175 | ··-·package_aide_installed |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 169 | [[packages]] | 177 | [[packages]] |
| 170 | name·=·"aide" | 178 | name·=·"aide" |
| 171 | version·=·"*" | 179 | version·=·"*" |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 178 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 179 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 180 | ····dnf·install·-y·"aide" | ||
| 181 | fi | ||
| 185 | package·install·aide | ||
| 182 | else | ||
| 183 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 184 | fi | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | package· | 191 | package·--add=aide |
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 195 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 196 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 197 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 197 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 222, 14 lines modified | Offset 222, 28 lines modified | ||
| 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 225 | ·············_\x8c_\x8i_\x8s············6.1.1 | 225 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 227 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 227 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 230 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 231 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 232 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 233 | ····dnf·install·-y·"aide" | ||
| 234 | fi | ||
| 235 | /usr/sbin/aide·--init | ||
| 236 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 237 | else | ||
| 238 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 239 | fi | ||
| 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 240 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 241 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 242 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1066791/1072583 bytes (99.46%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037eb0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037ec0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037ec0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037ed0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037ed0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037ee0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037ee0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037ef0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037ef0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037f00:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037f00:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037f10:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037f10:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037f20:·6f66·2032·3032·3 | 00037f20:·6f66·2032·3032·352d·3132·2d31·3029·0a20··of·2025-12-10).· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037f30:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037f40:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037f40:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037f50:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037f50:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037f60:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037f60:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037f70:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037f70:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037f80:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037f80:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037f90:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037f90:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 14766, 217 lines modified | Offset 14766, 217 lines modified | ||
| 00039ad0:·6172·6765·743d·2223·6964·6d31·3237·3539··arget="#idm12759 | 00039ad0:·6172·6765·743d·2223·6964·6d31·3237·3539··arget="#idm12759 | ||
| 00039ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00039ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00039af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00039af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00039b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00039b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00039b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00039b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00039b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00039b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00039b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00039b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039b40:·696f·6e20· | 00039b40:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | ||
| 00039b50:· | 00039b50:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 00039b60:· | 00039b60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00039b70:·6 | 00039b70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00039b80:· | 00039b80:·6522·2069·643d·2269·646d·3132·3735·3922··e"·id="idm12759" | ||
| 00039b90:·3 | 00039b90:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 00039ba0:· | 00039ba0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 00039bb0:·6 | 00039bb0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 00039bc0:· | 00039bc0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 00039bd0:· | 00039bd0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 00039be0:· | 00039be0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 00039bf0:· | 00039bf0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 00039c00:· | 00039c00:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 00039c10:· | 00039c10:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 00039c20:· | 00039c20:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 00039c30:·6 | 00039c30:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 00039c40:· | 00039c40:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 00039c50:· | 00039c50:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 00039c60:· | 00039c60:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 00039c70:· | 00039c70:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 00039c80:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 00039c80:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 00039c90:·6167·6520·2d2d·6164·643d·646e·662d·6175··age·--add=dnf-au | |||
| 00039ca0:·746f·6d61·7469·630a·3c2f·636f·6465·3e3c··tomatic.</code>< | |||
| 00039cb0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00039cc0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00039cd0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00039ce0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00039cf0:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | |||
| 00039d00:·3736·3022·2074·6162·696e·6465·783d·2230··760"·tabindex="0 | |||
| 00039d10:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039d20:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039d30:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039d40:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039d50:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039d60:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 00039d70:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00039d80:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00039d90:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00039da0:·6170·7365·2220·6964·3d22·6964·6d31·3237··apse"·id="idm127 | |||
| 00039db0:·3630·223e·3c74·6162·6c65·2063·6c61·7373··60"><table·class | |||
| 00039dc0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039dd0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039de0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039df0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039e00:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039e10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039e20:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039e30:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039e40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039e50:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039e60:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039e70:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039e80:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00039e90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00039ea0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 00039eb0:·7564·6520·696e·7374·616c·6c5f·646e·662d··ude·install_dnf- | |||
| 00039ec0:·6175·746f·6d61·7469·630a·0a63·6c61·7373··automatic..class | |||
| 00039 | 00039c90:·2069·6e73·7461·6c6c·5f64·6e66·2d61·7574···install_dnf-aut | ||
| 00039ca0:·6f6d·6174·6963·0a0a·636c·6173·7320·696e··omatic..class·in | |||
| 00039ee0:·6f6d·6174·6963·207b·0a20·2070·6163·6b61··omatic·{.··packa | |||
| 00039ef0:·6765·207b·2027·646e·662d·6175·746f·6d61··ge·{·'dnf-automa | |||
| 00039f00:·7469·6327·3a0a·2020·2020·656e·7375·7265··tic':.····ensure | |||
| 00039f10:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 00039f20:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 00039f30:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00039f40:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00039f50:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00039f60:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00039f70:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00039f80:·3132·3736·3122·2074·6162·696e·6465·783d··12761"·tabindex= | |||
| 00039f90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00039fa0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00039fb0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00039fc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00039fd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00039fe0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 00039ff0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a000:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a010:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a020:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003a030:·3132·3736·3122·3e3c·7461·626c·6520·636c··12761"><table·cl | |||
| 0003a040:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003a050:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003a060:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003a070:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003a080:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a090:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003a0a0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003a0b0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003a0c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a0d0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003a0e0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003a0f0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003a100:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003a110:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003a120:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003a130:·206e·616d·653a·2045·6e73·7572·6520·646e···name:·Ensure·dn | |||
| 0003a140:·662d·6175·746f·6d61·7469·6320·6973·2069··f-automatic·is·i | |||
| 0003a150:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003a160:·6765·3a0a·2020·2020·6e61·6d65·3a20·646e··ge:.····name:·dn | |||
| 0003a170:·662d·6175·746f·6d61·7469·630a·2020·2020··f-automatic.···· | |||
| 0003a180:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003a190:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| Max diff block lines reached; 3127597/3157321 bytes (99.06%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 58 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 58 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 59 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 59 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 83, 33 lines modified | Offset 83, 35 lines modified | ||
| 83 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 83 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 84 | ·············suitable·for·automatic,·regular·execution. | 84 | ·············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ···medium | 85 | Severity: ···medium |
| 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | Identifiers:·CCE-83454-9 | 87 | Identifiers:·CCE-83454-9 |
| 88 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 88 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 89 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 89 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 91 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 92 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 93 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 94 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 95 | package·--add=dnf-automatic | ||
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 97 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 91 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 98 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 92 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 99 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 93 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 100 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 94 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 101 | include·install_dnf-automatic | 95 | include·install_dnf-automatic |
| 102 | class·install_dnf-automatic·{ | 96 | class·install_dnf-automatic·{ |
| 103 | ··package·{·'dnf-automatic': | 97 | ··package·{·'dnf-automatic': |
| 104 | ····ensure·=>·'installed', | 98 | ····ensure·=>·'installed', |
| 105 | ··} | 99 | ··} |
| 106 | } | 100 | } |
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 106 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 107 | ····dnf·install·-y·"dnf-automatic" | ||
| 108 | fi | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | -·name:·Ensure·dnf-automatic·is·installed | 114 | -·name:·Ensure·dnf-automatic·is·installed |
| 113 | ··package: | 115 | ··package: |
| Offset 124, 30 lines modified | Offset 126, 28 lines modified | ||
| 124 | ··-·no_reboot_needed | 126 | ··-·no_reboot_needed |
| 125 | ··-·package_dnf-automatic_installed | 127 | ··-·package_dnf-automatic_installed |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | [[packages]] | 129 | [[packages]] |
| 128 | name·=·"dnf-automatic" | 130 | name·=·"dnf-automatic" |
| 129 | version·=·"*" | 131 | version·=·"*" |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | package·install·dnf-automatic | ||
| 135 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 136 | ····dnf·install·-y·"dnf-automatic" | ||
| 137 | fi | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | package· | 143 | package·--add=dnf-automatic |
| 144 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 144 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 145 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 145 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 146 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 146 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 147 | automatic.conf. | 147 | automatic.conf. |
| 148 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 148 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 149 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 149 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 150 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 150 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 158, 37 lines modified | Offset 158, 14 lines modified | ||
| 158 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 158 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 159 | Identifiers:·CCE-83456-4 | 159 | Identifiers:·CCE-83456-4 |
| 160 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 160 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 161 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 161 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 162 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 162 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 163 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 163 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 164 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 164 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 170 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 171 | ··ini_file: | ||
| 172 | ····dest:·/etc/dnf/automatic.conf | ||
| 173 | ····section:·commands | ||
| 174 | ····option:·apply_updates | ||
| 175 | ····value:·'yes' | ||
| 176 | ····create:·true | ||
| 177 | ··tags: | ||
| 178 | ··-·CCE-83456-4 | ||
| 179 | ··-·NIST-800-53-CM-6(a) | ||
| 180 | ··-·NIST-800-53-SI-2(5) | ||
| 181 | ··-·NIST-800-53-SI-2(c) | ||
| 182 | ··-·dnf-automatic_apply_updates | ||
| 183 | ··-·low_complexity | ||
| 184 | ··-·medium_disruption | ||
| 185 | ··-·medium_severity | ||
| 186 | ··-·no_reboot_needed | ||
| 187 | ··-·unknown_strategy | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 189 | found=false | 166 | found=false |
| 190 | #·set·value·in·all·files·if·they·contain·section·or·key | 167 | #·set·value·in·all·files·if·they·contain·section·or·key |
| 191 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | 168 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do |
| Max diff block lines reached; 213910/219673 bytes (97.38%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037dd0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037de0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037de0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037df0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037df0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e00:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e00:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e10:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e10:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e20:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e20:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2028·6173·206f·6620·3230·323 | 00037e40:·2020·2028·6173·206f·6620·3230·3235·2d31·····(as·of·2025-1 | ||
| 00037e50:·3 | 00037e50:·322d·3130·290a·2020·2020·2020·2020·2020··2-10).·········· | ||
| 00037e60:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e60:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e70:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e70:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037e80:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037e80:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037e90:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037e90:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037ea0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037ea0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037eb0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037eb0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ec0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ec0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15169, 252 lines modified | Offset 15169, 252 lines modified | ||
| 0003b400:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b400:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b410:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | 0003b410:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | ||
| 0003b420:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b420:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b430:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b430:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b440:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b440:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b450:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b450:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b460:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b460:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b470:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b470:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b480:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b490:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b4a0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b4b0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b4c0:·6d39·3230·3022·3e3c·7072·653e·3c63·6f64··m9200"><pre><cod | |||
| 0003b4d0:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003b4e0:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003b4f0:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003b500:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003b510:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003b520:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | |||
| 0003b530:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | |||
| 0003b540:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003b550:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003b560:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003b480:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 0003b490:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4c0:·6964·3d22·6964·6d39·3230·3022·3e3c·7461··id="idm9200"><ta | |||
| 0003b4d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b4e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b4f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b500:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b510:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b520:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b530:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b540:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b550:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b560:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b570:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0003b580:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b590:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b5a0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003b5b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b5c0:·3c63·6f64·653e·2d2d·2d0a·6170·6956·6572··<code>---.apiVer | |||
| 0003b5d0:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | |||
| 0003b5e0:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | |||
| 0003b5f0:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | |||
| 0003b600:·204d·6163·6869·6e65·436f·6e66·6967·0a73···MachineConfig.s | |||
| 0003b610:·7065·633a·0a20·2063·6f6e·6669·673a·0a20··pec:.··config:.· | |||
| 0003b620:·2020·2069·676e·6974·696f·6e3a·0a20·2020·····ignition:.··· | |||
| 0003b630:·2020·2076·6572·7369·6f6e·3a20·332e·312e·····version:·3.1. | |||
| 0003b640:·300a·2020·2020·7379·7374·656d·643a·0a20··0.····systemd:.· | |||
| 0003b650:·2020·2020·2075·6e69·7473·3a0a·2020·2020·······units:.···· | |||
| 0003b660:·2020·2020·2d20·6e61·6d65·3a20·636f·6e66······-·name:·conf | |||
| 0003b670:·6967·7572·652d·6372·7970·746f·2d70·6f6c··igure-crypto-pol | |||
| 0003b680:·6963·792e·7365·7276·6963·650a·2020·2020··icy.service.···· | |||
| 0003b690:·2020·2020·2020·656e·6162·6c65·643a·2074········enabled:·t | |||
| 0003b6a0:·7275·650a·2020·2020·2020·2020·2020·636f··rue.··········co | |||
| 0003b6b0:·6e74·656e·7473·3a20·7c0a·2020·2020·2020··ntents:·|.······ | |||
| 0003b6c0:·2020·2020·2020·5b55·6e69·745d·0a20·2020········[Unit].··· | |||
| 0003b6d0:·2020·2020·2020·2020·2042·6566·6f72·653d···········Before= | |||
| 0003b6e0:·6b75·6265·6c65·742e·7365·7276·6963·650a··kubelet.service. | |||
| 0003b6f0:·2020·2020·2020·2020·2020·2020·5b53·6572··············[Ser | |||
| 0003b700:·7669·6365·5d0a·2020·2020·2020·2020·2020··vice].·········· | |||
| 0003b710:·2020·5479·7065·3d6f·6e65·7368·6f74·0a20····Type=oneshot.· | |||
| 0003b720:·2020·2020·2020·2020·2020·2045·7865·6353·············ExecS | |||
| 0003b | 0003b570:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | ||
| 0003b | 0003b580:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | ||
| 0003b590:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003b750:·7420·7b7b·2e76·6172·5f73·7973·7465·6d5f··t·{{.var_system_ | |||
| 0003b760:·6372·7970·746f·5f70·6f6c·6963·797d·7d0a··crypto_policy}}. | |||
| 0003b770:·2020·2020·2020·2020·2020·2020·5265·6d61··············Rema | |||
| 0003b780:·696e·4166·7465·7245·7869·743d·7965·730a··inAfterExit=yes. | |||
| 0003b790:·2020·2020·2020·2020·2020·2020·5b49·6e73··············[Ins | |||
| 0003b7a0:·7461·6c6c·5d0a·2020·2020·2020·2020·2020··tall].·········· | |||
| 0003b7b0:·2020·5761·6e74·6564·4279·3d6d·756c·7469····WantedBy=multi | |||
| 0003b7c0:·2d75·7365·722e·7461·7267·6574·0a3c·2f63··-user.target.</c | |||
| 0003b7d0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b7e0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b7f0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b800:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b810:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b820:·6964·6d39·3230·3122·2074·6162·696e·6465··idm9201"·tabinde | |||
| 0003b830:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b840:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b850:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b860:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b870:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b880:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b890:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b8a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b8b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b8c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b8d0:·646d·3932·3031·223e·3c74·6162·6c65·2063··dm9201"><table·c | |||
| 0003b8e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b8f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b900:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b910:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b920:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b930:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b940:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b950:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b960:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b970:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b980:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b990:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b9a0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 0003b9b0:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 0003b9c0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b9d0:·653e·2d20·6e61·6d65·3a20·5843·4344·4620··e>-·name:·XCCDF· | |||
| Max diff block lines reached; 12863194/12897886 bytes (99.73%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Advanced | 43 | ··············Linux·9·-·Advanced |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 104, 39 lines modified | Offset 104, 33 lines modified | ||
| 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 107 | ·············_\x8c_\x8i_\x8s······1.6.1 | 107 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 112 | var_system_crypto_policy='DEFAULT' | ||
| 113 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 114 | rc=$? | ||
| 115 | if·test·"$rc"·=·127;·then | ||
| 116 | » echo·"$stderr_of_call"·>&2 | ||
| 117 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 118 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 119 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 120 | » false··#·end·with·an·error·code | ||
| 121 | elif·test·"$rc"·!=·0;·then | ||
| 122 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 123 | » false··#·end·with·an·error·code | ||
| 124 | fi | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 116 | --- | ||
| 117 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 118 | kind:·MachineConfig | ||
| 119 | spec: | ||
| 120 | ··config: | ||
| 121 | ····ignition: | ||
| 122 | ······version:·3.1.0 | ||
| 123 | ····systemd: | ||
| 124 | ······units: | ||
| 125 | ········-·name:·configure-crypto-policy.service | ||
| 126 | ··········enabled:·true | ||
| 127 | ··········contents:·| | ||
| 128 | ············[Unit] | ||
| 129 | ············Before=kubelet.service | ||
| 130 | ············[Service] | ||
| 131 | ············Type=oneshot | ||
| 132 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 133 | ············RemainAfterExit=yes | ||
| 134 | ············[Install] | ||
| 135 | ············WantedBy=multi-user.target | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 141 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 130 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 142 | ··set_fact: | 131 | ··set_fact: |
| Offset 187, 33 lines modified | Offset 181, 39 lines modified | ||
| 187 | ··-·PCI-DSSv4-2.2.7 | 181 | ··-·PCI-DSSv4-2.2.7 |
| 188 | ··-·configure_crypto_policy | 182 | ··-·configure_crypto_policy |
| 189 | ··-·high_severity | 183 | ··-·high_severity |
| 190 | ··-·low_complexity | 184 | ··-·low_complexity |
| 191 | ··-·low_disruption | 185 | ··-·low_disruption |
| 192 | ··-·no_reboot_needed | 186 | ··-·no_reboot_needed |
| 193 | ··-·restrict_strategy | 187 | ··-·restrict_strategy |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 195 | var_system_crypto_policy='DEFAULT' | ||
| 196 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 197 | rc=$? | ||
| 198 | if·test·"$rc"·=·127;·then | ||
| 199 | » echo·"$stderr_of_call"·>&2 | ||
| 200 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 201 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 202 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 203 | » false··#·end·with·an·error·code | ||
| 204 | elif·test·"$rc"·!=·0;·then | ||
| 205 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | 189 | C.Co.om.mp.pl.le.ex.xi.it.ty.y:.:·low | |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 193 | --- | ||
| 194 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 195 | kind:·MachineConfig | ||
| 196 | spec: | ||
| 197 | ··config: | ||
| 198 | ····ignition: | ||
| 199 | ······version:·3.1.0 | ||
| 200 | ····systemd: | ||
| 201 | ······units: | ||
| 202 | ········-·name:·configure-crypto-policy.service | ||
| 203 | ··········enabled:·true | ||
| 204 | ··········contents:·| | ||
| 205 | ············[Unit] | ||
| 206 | ············Before=kubelet.service | ||
| 207 | ············[Service] | ||
| 208 | ············Type=oneshot | ||
| 209 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 210 | ············RemainAfterExit=yes | ||
| 211 | ············[Install] | ||
| 212 | ············WantedBy=multi-user.target | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 214 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 210 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 215 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 211 | Severity: ···medium | 216 | Severity: ···medium |
| Max diff block lines reached; 1151314/1157272 bytes (99.49%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037dd0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037de0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037de0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037df0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037df0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e00:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e00:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e10:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e10:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e20:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e20:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e30:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e30:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e40:·323 | 00037e40:·3235·2d31·322d·3130·290a·2020·2020·2020··25-12-10).······ | ||
| 00037e50:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e50:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e60:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e60:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037e70:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037e70:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037e80:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037e80:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037e90:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037e90:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ea0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ea0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037eb0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037eb0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15129, 252 lines modified | Offset 15129, 252 lines modified | ||
| 0003b180:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b180:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b190:·3d22·2369·646d·3932·3030·2220·7461·6269··="#idm9200"·tabi | 0003b190:·3d22·2369·646d·3932·3030·2220·7461·6269··="#idm9200"·tabi | ||
| 0003b1a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b1a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b1b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b1b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b1c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b1c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b1d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b1d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b1e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b1e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b1f0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b1f0:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003b200:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003b210:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b220:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b230:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b240:·646d·3932·3030·223e·3c70·7265·3e3c·636f··dm9200"><pre><co | |||
| 0003b250:·6465·3e0a·7661·725f·7379·7374·656d·5f63··de>.var_system_c | |||
| 0003b260:·7279·7074·6f5f·706f·6c69·6379·3d27·3c61··rypto_policy='<a | |||
| 0003b270:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | |||
| 0003b280:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | |||
| 0003b290:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | |||
| 0003b2a0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | |||
| 0003b2b0:·6e74·5f76·616c·7565·5f76·6172·5f73·7973··nt_value_var_sys | |||
| 0003b2c0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003b2d0:·7922·3e44·4546·4155·4c54·3c2f·6162·6272··y">DEFAULT</abbr | |||
| 0003b2e0:·3e27·0a0a·0a73·7464·6572·725f·6f66·5f63··>'...stderr_of_c | |||
| 0003b200:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0003b210:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b220:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b230:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b240:·2069·643d·2269·646d·3932·3030·223e·3c74···id="idm9200"><t | |||
| 0003b250:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b260:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b270:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b280:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b290:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b2a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b2b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b2c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b2d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b2e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b2f0:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0003b300:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b310:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b320:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003b330:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b340:·3e3c·636f·6465·3e2d·2d2d·0a61·7069·5665··><code>---.apiVe | |||
| 0003b350:·7273·696f·6e3a·206d·6163·6869·6e65·636f··rsion:·machineco | |||
| 0003b360:·6e66·6967·7572·6174·696f·6e2e·6f70·656e··nfiguration.open | |||
| 0003b370:·7368·6966·742e·696f·2f76·310a·6b69·6e64··shift.io/v1.kind | |||
| 0003b380:·3a20·4d61·6368·696e·6543·6f6e·6669·670a··:·MachineConfig. | |||
| 0003b390:·7370·6563·3a0a·2020·636f·6e66·6967·3a0a··spec:.··config:. | |||
| 0003b3a0:·2020·2020·6967·6e69·7469·6f6e·3a0a·2020······ignition:.·· | |||
| 0003b3b0:·2020·2020·7665·7273·696f·6e3a·2033·2e31······version:·3.1 | |||
| 0003b3c0:·2e30·0a20·2020·2073·7973·7465·6d64·3a0a··.0.····systemd:. | |||
| 0003b3d0:·2020·2020·2020·756e·6974·733a·0a20·2020········units:.··· | |||
| 0003b3e0:·2020·2020·202d·206e·616d·653a·2063·6f6e·······-·name:·con | |||
| 0003b3f0:·6669·6775·7265·2d63·7279·7074·6f2d·706f··figure-crypto-po | |||
| 0003b400:·6c69·6379·2e73·6572·7669·6365·0a20·2020··licy.service.··· | |||
| 0003b410:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 0003b420:·7472·7565·0a20·2020·2020·2020·2020·2063··true.··········c | |||
| 0003b430:·6f6e·7465·6e74·733a·207c·0a20·2020·2020··ontents:·|.····· | |||
| 0003b440:·2020·2020·2020·205b·556e·6974·5d0a·2020·········[Unit].·· | |||
| 0003b450:·2020·2020·2020·2020·2020·4265·666f·7265············Before | |||
| 0003b460:·3d6b·7562·656c·6574·2e73·6572·7669·6365··=kubelet.service | |||
| 0003b470:·0a20·2020·2020·2020·2020·2020·205b·5365··.············[Se | |||
| 0003b480:·7276·6963·655d·0a20·2020·2020·2020·2020··rvice].········· | |||
| 0003b490:·2020·2054·7970·653d·6f6e·6573·686f·740a·····Type=oneshot. | |||
| 0003b4a0:·2020·2020·2020·2020·2020·2020·4578·6563··············Exec | |||
| 0003b | 0003b2f0:·616c·6c3d·2428·7570·6461·7465·2d63·7279··all=$(update-cry | ||
| 0003b | 0003b300:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | ||
| 0003b310:·6574·2024·7b76·6172·5f73·7973·7465·6d5f··et·${var_system_ | |||
| 0003b4d0:·6574·207b·7b2e·7661·725f·7379·7374·656d··et·{{.var_system | |||
| 0003b4e0:·5f63·7279·7074·6f5f·706f·6c69·6379·7d7d··_crypto_policy}} | |||
| 0003b4f0:·0a20·2020·2020·2020·2020·2020·2052·656d··.············Rem | |||
| 0003b500:·6169·6e41·6674·6572·4578·6974·3d79·6573··ainAfterExit=yes | |||
| 0003b510:·0a20·2020·2020·2020·2020·2020·205b·496e··.············[In | |||
| 0003b520:·7374·616c·6c5d·0a20·2020·2020·2020·2020··stall].········· | |||
| 0003b530:·2020·2057·616e·7465·6442·793d·6d75·6c74·····WantedBy=mult | |||
| 0003b540:·692d·7573·6572·2e74·6172·6765·740a·3c2f··i-user.target.</ | |||
| 0003b550:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b560:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b570:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b580:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b590:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b5a0:·2369·646d·3932·3031·2220·7461·6269·6e64··#idm9201"·tabind | |||
| 0003b5b0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b5c0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b5d0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b5e0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b5f0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b600:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b610:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b620:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b630:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b640:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b650:·6964·6d39·3230·3122·3e3c·7461·626c·6520··idm9201"><table· | |||
| 0003b660:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b670:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b680:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b690:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b6a0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b6b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b6c0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b6d0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b6e0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b6f0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b700:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b710:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b720:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003b730:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003b740:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b750:·6465·3e2d·206e·616d·653a·2058·4343·4446··de>-·name:·XCCDF | |||
| 0003b760:·2056·616c·7565·2076·6172·5f73·7973·7465···Value·var_syste | |||
| Max diff block lines reached; 8772985/8807539 bytes (99.61%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Basic | 43 | ··············Linux·9·-·Basic |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 96, 39 lines modified | Offset 96, 33 lines modified | ||
| 96 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 96 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 97 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 97 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 98 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 98 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 99 | ·············_\x8c_\x8i_\x8s······1.6.1 | 99 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 100 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 100 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 101 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 101 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 104 | var_system_crypto_policy='DEFAULT' | ||
| 105 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 106 | rc=$? | ||
| 107 | if·test·"$rc"·=·127;·then | ||
| 108 | » echo·"$stderr_of_call"·>&2 | ||
| 109 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 110 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 111 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 112 | » false··#·end·with·an·error·code | ||
| 113 | elif·test·"$rc"·!=·0;·then | ||
| 114 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 115 | » false··#·end·with·an·error·code | ||
| 116 | fi | ||
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 108 | --- | ||
| 109 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 110 | kind:·MachineConfig | ||
| 111 | spec: | ||
| 112 | ··config: | ||
| 113 | ····ignition: | ||
| 114 | ······version:·3.1.0 | ||
| 115 | ····systemd: | ||
| 116 | ······units: | ||
| 117 | ········-·name:·configure-crypto-policy.service | ||
| 118 | ··········enabled:·true | ||
| 119 | ··········contents:·| | ||
| 120 | ············[Unit] | ||
| 121 | ············Before=kubelet.service | ||
| 122 | ············[Service] | ||
| 123 | ············Type=oneshot | ||
| 124 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 125 | ············RemainAfterExit=yes | ||
| 126 | ············[Install] | ||
| 127 | ············WantedBy=multi-user.target | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 122 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 134 | ··set_fact: | 123 | ··set_fact: |
| Offset 179, 33 lines modified | Offset 173, 39 lines modified | ||
| 179 | ··-·PCI-DSSv4-2.2.7 | 173 | ··-·PCI-DSSv4-2.2.7 |
| 180 | ··-·configure_crypto_policy | 174 | ··-·configure_crypto_policy |
| 181 | ··-·high_severity | 175 | ··-·high_severity |
| 182 | ··-·low_complexity | 176 | ··-·low_complexity |
| 183 | ··-·low_disruption | 177 | ··-·low_disruption |
| 184 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 185 | ··-·restrict_strategy | 179 | ··-·restrict_strategy |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 187 | var_system_crypto_policy='DEFAULT' | ||
| 188 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 189 | rc=$? | ||
| 190 | if·test·"$rc"·=·127;·then | ||
| 191 | » echo·"$stderr_of_call"·>&2 | ||
| 192 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 193 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 194 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 195 | » false··#·end·with·an·error·code | ||
| 196 | elif·test·"$rc"·!=·0;·then | ||
| 197 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 198 | » false··#·end·with·an·error·code | ||
| 199 | 181 | C.Co.om.mp.pl.le.ex.xi.it.ty.y:.:·low | |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 185 | --- | ||
| 186 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 187 | kind:·MachineConfig | ||
| 188 | spec: | ||
| 189 | ··config: | ||
| 190 | ····ignition: | ||
| 191 | ······version:·3.1.0 | ||
| 192 | ····systemd: | ||
| 193 | ······units: | ||
| 194 | ········-·name:·configure-crypto-policy.service | ||
| 195 | ··········enabled:·true | ||
| 196 | ··········contents:·| | ||
| 197 | ············[Unit] | ||
| 198 | ············Before=kubelet.service | ||
| 199 | ············[Service] | ||
| 200 | ············Type=oneshot | ||
| 201 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 202 | ············RemainAfterExit=yes | ||
| 203 | ············[Install] | ||
| 204 | ············WantedBy=multi-user.target | ||
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 201 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 206 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 202 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 207 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 203 | Severity: ···medium | 208 | Severity: ···medium |
| Max diff block lines reached; 864737/870687 bytes (99.32%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037de0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037df0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037df0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037e00:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037e00:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e10:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e10:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e20:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e20:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e30:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e30:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2020·2028·6173·206f·6620·3230·323 | 00037e50:·2020·2028·6173·206f·6620·3230·3235·2d31·····(as·of·2025-1 | ||
| 00037e60:·3 | 00037e60:·322d·3130·290a·2020·2020·2020·2020·2020··2-10).·········· | ||
| 00037e70:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e70:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e80:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e80:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037e90:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037e90:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037ea0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037ea0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037eb0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037eb0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037ec0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037ec0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ed0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ed0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15170, 252 lines modified | Offset 15170, 252 lines modified | ||
| 0003b410:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b410:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b420:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | 0003b420:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | ||
| 0003b430:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b430:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b440:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b440:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b450:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b450:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b460:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b460:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b470:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b470:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b480:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b480:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b490:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b4a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b4b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b4c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b4d0:·6d39·3230·3022·3e3c·7072·653e·3c63·6f64··m9200"><pre><cod | |||
| 0003b4e0:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003b4f0:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003b500:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003b510:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003b520:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003b530:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | |||
| 0003b540:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | |||
| 0003b550:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003b560:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003b570:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003b490:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 0003b4a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4d0:·6964·3d22·6964·6d39·3230·3022·3e3c·7461··id="idm9200"><ta | |||
| 0003b4e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b4f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b500:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b510:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b520:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b530:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b540:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b550:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b560:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b570:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b580:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0003b590:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b5a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b5b0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003b5c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b5d0:·3c63·6f64·653e·2d2d·2d0a·6170·6956·6572··<code>---.apiVer | |||
| 0003b5e0:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | |||
| 0003b5f0:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | |||
| 0003b600:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | |||
| 0003b610:·204d·6163·6869·6e65·436f·6e66·6967·0a73···MachineConfig.s | |||
| 0003b620:·7065·633a·0a20·2063·6f6e·6669·673a·0a20··pec:.··config:.· | |||
| 0003b630:·2020·2069·676e·6974·696f·6e3a·0a20·2020·····ignition:.··· | |||
| 0003b640:·2020·2076·6572·7369·6f6e·3a20·332e·312e·····version:·3.1. | |||
| 0003b650:·300a·2020·2020·7379·7374·656d·643a·0a20··0.····systemd:.· | |||
| 0003b660:·2020·2020·2075·6e69·7473·3a0a·2020·2020·······units:.···· | |||
| 0003b670:·2020·2020·2d20·6e61·6d65·3a20·636f·6e66······-·name:·conf | |||
| 0003b680:·6967·7572·652d·6372·7970·746f·2d70·6f6c··igure-crypto-pol | |||
| 0003b690:·6963·792e·7365·7276·6963·650a·2020·2020··icy.service.···· | |||
| 0003b6a0:·2020·2020·2020·656e·6162·6c65·643a·2074········enabled:·t | |||
| 0003b6b0:·7275·650a·2020·2020·2020·2020·2020·636f··rue.··········co | |||
| 0003b6c0:·6e74·656e·7473·3a20·7c0a·2020·2020·2020··ntents:·|.······ | |||
| 0003b6d0:·2020·2020·2020·5b55·6e69·745d·0a20·2020········[Unit].··· | |||
| 0003b6e0:·2020·2020·2020·2020·2042·6566·6f72·653d···········Before= | |||
| 0003b6f0:·6b75·6265·6c65·742e·7365·7276·6963·650a··kubelet.service. | |||
| 0003b700:·2020·2020·2020·2020·2020·2020·5b53·6572··············[Ser | |||
| 0003b710:·7669·6365·5d0a·2020·2020·2020·2020·2020··vice].·········· | |||
| 0003b720:·2020·5479·7065·3d6f·6e65·7368·6f74·0a20····Type=oneshot.· | |||
| 0003b730:·2020·2020·2020·2020·2020·2045·7865·6353·············ExecS | |||
| 0003b | 0003b580:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | ||
| 0003b | 0003b590:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | ||
| 0003b5a0:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003b760:·7420·7b7b·2e76·6172·5f73·7973·7465·6d5f··t·{{.var_system_ | |||
| 0003b770:·6372·7970·746f·5f70·6f6c·6963·797d·7d0a··crypto_policy}}. | |||
| 0003b780:·2020·2020·2020·2020·2020·2020·5265·6d61··············Rema | |||
| 0003b790:·696e·4166·7465·7245·7869·743d·7965·730a··inAfterExit=yes. | |||
| 0003b7a0:·2020·2020·2020·2020·2020·2020·5b49·6e73··············[Ins | |||
| 0003b7b0:·7461·6c6c·5d0a·2020·2020·2020·2020·2020··tall].·········· | |||
| 0003b7c0:·2020·5761·6e74·6564·4279·3d6d·756c·7469····WantedBy=multi | |||
| 0003b7d0:·2d75·7365·722e·7461·7267·6574·0a3c·2f63··-user.target.</c | |||
| 0003b7e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b7f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b800:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b810:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b820:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b830:·6964·6d39·3230·3122·2074·6162·696e·6465··idm9201"·tabinde | |||
| 0003b840:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b850:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b860:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b870:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b880:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b890:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b8a0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b8b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b8c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b8d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b8e0:·646d·3932·3031·223e·3c74·6162·6c65·2063··dm9201"><table·c | |||
| 0003b8f0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b900:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b910:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b920:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b930:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b940:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b950:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b960:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b970:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b980:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b990:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b9a0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b9b0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 0003b9c0:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 0003b9d0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b9e0:·653e·2d20·6e61·6d65·3a20·5843·4344·4620··e>-·name:·XCCDF· | |||
| Max diff block lines reached; 10025895/10060587 bytes (99.66%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Intermediate | 43 | ··············Linux·9·-·Intermediate |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 104, 39 lines modified | Offset 104, 33 lines modified | ||
| 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 107 | ·············_\x8c_\x8i_\x8s······1.6.1 | 107 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 112 | var_system_crypto_policy='DEFAULT' | ||
| 113 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 114 | rc=$? | ||
| 115 | if·test·"$rc"·=·127;·then | ||
| 116 | » echo·"$stderr_of_call"·>&2 | ||
| 117 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 118 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 119 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 120 | » false··#·end·with·an·error·code | ||
| 121 | elif·test·"$rc"·!=·0;·then | ||
| 122 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 123 | » false··#·end·with·an·error·code | ||
| 124 | fi | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 116 | --- | ||
| 117 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 118 | kind:·MachineConfig | ||
| 119 | spec: | ||
| 120 | ··config: | ||
| 121 | ····ignition: | ||
| 122 | ······version:·3.1.0 | ||
| 123 | ····systemd: | ||
| 124 | ······units: | ||
| 125 | ········-·name:·configure-crypto-policy.service | ||
| 126 | ··········enabled:·true | ||
| 127 | ··········contents:·| | ||
| 128 | ············[Unit] | ||
| 129 | ············Before=kubelet.service | ||
| 130 | ············[Service] | ||
| 131 | ············Type=oneshot | ||
| 132 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 133 | ············RemainAfterExit=yes | ||
| 134 | ············[Install] | ||
| 135 | ············WantedBy=multi-user.target | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 141 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 130 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 142 | ··set_fact: | 131 | ··set_fact: |
| Offset 187, 33 lines modified | Offset 181, 39 lines modified | ||
| 187 | ··-·PCI-DSSv4-2.2.7 | 181 | ··-·PCI-DSSv4-2.2.7 |
| 188 | ··-·configure_crypto_policy | 182 | ··-·configure_crypto_policy |
| 189 | ··-·high_severity | 183 | ··-·high_severity |
| 190 | ··-·low_complexity | 184 | ··-·low_complexity |
| 191 | ··-·low_disruption | 185 | ··-·low_disruption |
| 192 | ··-·no_reboot_needed | 186 | ··-·no_reboot_needed |
| 193 | ··-·restrict_strategy | 187 | ··-·restrict_strategy |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 195 | var_system_crypto_policy='DEFAULT' | ||
| 196 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 197 | rc=$? | ||
| 198 | if·test·"$rc"·=·127;·then | ||
| 199 | » echo·"$stderr_of_call"·>&2 | ||
| 200 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 201 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 202 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 203 | » false··#·end·with·an·error·code | ||
| 204 | elif·test·"$rc"·!=·0;·then | ||
| 205 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | 189 | C.Co.om.mp.pl.le.ex.xi.it.ty.y:.:·low | |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 193 | --- | ||
| 194 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 195 | kind:·MachineConfig | ||
| 196 | spec: | ||
| 197 | ··config: | ||
| 198 | ····ignition: | ||
| 199 | ······version:·3.1.0 | ||
| 200 | ····systemd: | ||
| 201 | ······units: | ||
| 202 | ········-·name:·configure-crypto-policy.service | ||
| 203 | ··········enabled:·true | ||
| 204 | ··········contents:·| | ||
| 205 | ············[Unit] | ||
| 206 | ············Before=kubelet.service | ||
| 207 | ············[Service] | ||
| 208 | ············Type=oneshot | ||
| 209 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 210 | ············RemainAfterExit=yes | ||
| 211 | ············[Install] | ||
| 212 | ············WantedBy=multi-user.target | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 214 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 210 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 215 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 211 | Severity: ···medium | 216 | Severity: ···medium |
| Max diff block lines reached; 1052425/1058391 bytes (99.44%) of diff not shown. | |||
| Offset 14299, 15 lines modified | Offset 14299, 15 lines modified | ||
| 00037da0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037da0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037db0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037db0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037dc0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037dc0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037dd0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037dd0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037de0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037de0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037df0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037df0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e00:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e00:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e10:·6620·3230·323 | 00037e10:·6620·3230·3235·2d31·322d·3130·290a·2020··f·2025-12-10).·· | ||
| 00037e20:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e20:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e30:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e30:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e40:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e40:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e50:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e50:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e60:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e60:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e70:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e70:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e80:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e80:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15158, 236 lines modified | Offset 15158, 236 lines modified | ||
| 0003b350:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b350:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b360:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | 0003b360:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | ||
| 0003b370:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b370:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b380:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b380:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b390:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b390:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b3a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b3a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b3b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b3b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b3c0:·656d·6564·6961·7469·6f6e·20 | 0003b3c0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003b3d0:· | 0003b3d0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003b3e0:· | 0003b3e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b3f0:· | 0003b3f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b400:·6 | 0003b400:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b410:·6 | 0003b410:·6d38·3430·3622·3e3c·7461·626c·6520·636c··m8406"><table·cl | ||
| 0003b420:·6 | 0003b420:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b430:· | 0003b430:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b440:· | 0003b440:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b450:·6 | 0003b450:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b460:· | 0003b460:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b470:· | 0003b470:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b480:· | 0003b480:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b490:·7 | 0003b490:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b4a0:· | 0003b4a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b4b0:· | 0003b4b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b4c0:· | 0003b4c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b4d0:· | 0003b4d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b4e0:· | 0003b4e0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b4f0:·6 | 0003b4f0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b500:· | 0003b500:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | ||
| 0003b510:·3e0a·7061·636b·6167·6520·2d2d·6164·643d··>.package·--add= | |||
| 0003b520:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 0003b530:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b540:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b550:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b560:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b570:·6172·6765·743d·2223·6964·6d38·3430·3722··arget="#idm8407" | |||
| 0003b580:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b590:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b5a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b5b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b5c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b5d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b5e0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b5f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b600:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b610:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b620:·2220·6964·3d22·6964·6d38·3430·3722·3e3c··"·id="idm8407">< | |||
| 0003b630:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b640:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b650:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b660:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b670:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b680:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b690:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b | 0003b510:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | ||
| 0003b520:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b530:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b540:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b550:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b560:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b570:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b580:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b590:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b5a0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b5b0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b5c0:·6574·3d22·2369·646d·3834·3037·2220·7461··et="#idm8407"·ta | |||
| 0003b5d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b5e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b5f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b600:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b610:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b620:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b630:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b640:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b650:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b660:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b670:·2269·646d·3834·3037·223e·3c74·6162·6c65··"idm8407"><table | |||
| 0003b680:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b690:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b6a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b6b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b6c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b6 | 0003b6d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b6 | 0003b6e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b6 | 0003b6f0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b700:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b6f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b700:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b710:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b720:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b730:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b740:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b750:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b760:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b770:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b7 | 0003b710:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b720:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b730:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b740:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b750:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b760:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b770:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003b780:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003b790:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003b7a0:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003b7b0:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003b7c0:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003b7d0:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003b7e0:·7265·6e76·205d·3b20·7468·656e·0a0a·6966··renv·];·then..if | |||
| 0003b7f0:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003b800:·7420·2261·6964·6522·203b·2074·6865·6e0a··t·"aide"·;·then. | |||
| 0003b810:·2020·2020·646e·6620·696e·7374·616c·6c20······dnf·install· | |||
| Max diff block lines reached; 25105295/25137641 bytes (99.87%) of diff not shown. | |||
| Offset 14299, 16 lines modified | Offset 14299, 16 lines modified | ||
| 00037da0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037da0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037db0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037db0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037dc0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037dc0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037dd0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037dd0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037de0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037de0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037df0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037df0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e10:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e10:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037e20:·2d31·3 | 00037e20:·2d31·322d·3130·290a·2020·2020·2020·2020··-12-10).········ | ||
| 00037e30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037e80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037e80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037e90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037e90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15127, 236 lines modified | Offset 15127, 236 lines modified | ||
| 0003b160:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | 0003b160:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b170:·3036·2220·7461·6269·6e64·6578·3d22·3022··06"·tabindex="0" | 0003b170:·3036·2220·7461·6269·6e64·6578·3d22·3022··06"·tabindex="0" | ||
| 0003b180:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b180:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b190:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b190:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b1a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b1a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b1b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b1b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b1d0:·6174·696f·6e20· | 0003b1d0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | ||
| 0003b1e0:· | 0003b1e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b1f0:· | 0003b1f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b200:·6 | 0003b200:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b210:· | 0003b210:·7073·6522·2069·643d·2269·646d·3834·3036··pse"·id="idm8406 | ||
| 0003b220:· | 0003b220:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b230:· | 0003b230:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b240:·7 | 0003b240:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b250:·65 | 0003b250:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b260:·6 | 0003b260:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b270:·6 | 0003b270:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b280:·6 | 0003b280:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b290:· | 0003b290:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b2a0:· | 0003b2a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b2b0:· | 0003b2b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b2c0:· | 0003b2c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b2d0:·6 | 0003b2d0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b2e0:· | 0003b2e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b2f0:· | 0003b2f0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b300:· | 0003b300:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b310:· | 0003b310:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | ||
| 0003b320:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 0003b3 | 0003b320:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | ||
| 0003b330:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b340:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b350:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b360:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b370:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b380:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b390:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b3a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b3b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b3c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b3d0:·6964·6d38·3430·3722·2074·6162·696e·6465··idm8407"·tabinde | |||
| 0003b3e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b3f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b400:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b410:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b420:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b430:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b440:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b | 0003b450:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b460:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b470:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b480:·3430·3722·3e3c·7461·626c·6520·636c·6173··407"><table·clas | |||
| 0003b490:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b4a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b4b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b4c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b4d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b350:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b360:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b370:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b380:·3d22·2369·646d·3834·3037·2220·7461·6269··="#idm8407"·tabi | |||
| 0003b390:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b3a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b3b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b3c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b3d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b3e0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b3f0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b400:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b410:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b420:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b430:·2269·646d·3834·3037·223e·3c74·6162·6c65··"idm8407"><table | |||
| 0003b440:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b450:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b460:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b470:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b480:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b490:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b4a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b4b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b4 | 0003b4e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b4d0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b4 | 0003b4f0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b500:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b | 0003b510:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b500:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b510:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b520:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b530:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b540:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b550:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b560:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b570:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b580:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b5 | 0003b520:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b530:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b540:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b550:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b560:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b570:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b580:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b590:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b5a0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b5b0:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b5c0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b5d0:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b5e0:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b5f0:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b600:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b610:·6465·2220·3b20·7468·656e·0a20·2020·2064··de"·;·then.····d | |||
| Max diff block lines reached; 10667814/10700298 bytes (99.70%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 106, 33 lines modified | Offset 106, 41 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 109 | ·············_\x8c_\x8i_\x8s············6.1.1 | 109 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 118 | package·--add=aide | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | include·install_aide | 118 | include·install_aide |
| 125 | class·install_aide·{ | 119 | class·install_aide·{ |
| 126 | ··package·{·'aide': | 120 | ··package·{·'aide': |
| 127 | ····ensure·=>·'installed', | 121 | ····ensure·=>·'installed', |
| 128 | ··} | 122 | ··} |
| 129 | } | 123 | } |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 130 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 131 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 132 | ····dnf·install·-y·"aide" | ||
| 133 | fi | ||
| 134 | else | ||
| 135 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 136 | fi | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 142 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 143 | ··package: |
| Offset 153, 36 lines modified | Offset 161, 28 lines modified | ||
| 153 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | [[packages]] | 164 | [[packages]] |
| 157 | name·=·"aide" | 165 | name·=·"aide" |
| 158 | version·=·"*" | 166 | version·=·"*" |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 166 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 167 | ····dnf·install·-y·"aide" | ||
| 168 | fi | ||
| 172 | package·install·aide | ||
| 169 | else | ||
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 171 | fi | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | package· | 178 | package·--add=aide |
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 182 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 183 | To·initiate·a·manual·check,·run·the·following·command: | 184 | To·initiate·a·manual·check,·run·the·following·command: |
| 184 | $·sudo·/usr/sbin/aide·--check | 185 | $·sudo·/usr/sbin/aide·--check |
| Offset 202, 14 lines modified | Offset 202, 28 lines modified | ||
| 202 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 202 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 204 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 204 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 205 | ·············_\x8c_\x8i_\x8s············6.1.1 | 205 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 206 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 206 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 207 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 207 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 208 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 208 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 210 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 211 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 212 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 213 | ····dnf·install·-y·"aide" | ||
| 214 | fi | ||
| 215 | /usr/sbin/aide·--init | ||
| 216 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 217 | else | ||
| 218 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 219 | fi | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1307824/1313759 bytes (99.55%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e30:·3230·323 | 00037e30:·3230·3235·2d31·322d·3130·290a·2020·2020··2025-12-10).···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15118, 236 lines modified | Offset 15118, 236 lines modified | ||
| 0003b0d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b0d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b0e0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | 0003b0e0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | ||
| 0003b0f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b0f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b100:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b100:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b110:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b110:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b120:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b120:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b130:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b130:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b140:·5265·6d65·6469·6174·696f·6e20· | 0003b140:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003b150:·6 | 0003b150:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | ||
| 0003b160:· | 0003b160:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b170:· | 0003b170:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b180:· | 0003b180:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b190:· | 0003b190:·646d·3834·3036·223e·3c74·6162·6c65·2063··dm8406"><table·c | ||
| 0003b1a0:· | 0003b1a0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b1b0:·6 | 0003b1b0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b1c0:·6 | 0003b1c0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b1d0:· | 0003b1d0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b1e0:· | 0003b1e0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b1f0:· | 0003b1f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b200:· | 0003b200:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b210:·7 | 0003b210:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b220:· | 0003b220:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b230:· | 0003b230:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b240:· | 0003b240:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b250:· | 0003b250:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b260:·6 | 0003b260:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b270:·6 | 0003b270:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b280:· | 0003b280:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b290:·653e·0a70·6163·6b61·6765·202d·2d61·6464··e>.package·--add | |||
| 0003b2a0:·3d61·6964·650a·3c2f·636f·6465·3e3c·2f70··=aide.</code></p | |||
| 0003b2b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b2c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b2d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b2e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b2f0:·7461·7267·6574·3d22·2369·646d·3834·3037··target="#idm8407 | |||
| 0003b300:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b310:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b320:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b330:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b340:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b350:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b360:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b370:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b380:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b390:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b3a0:·6522·2069·643d·2269·646d·3834·3037·223e··e"·id="idm8407"> | |||
| 0003b3b0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b3c0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b3d0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b3e0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b3f0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b400:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b410:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003b290:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | ||
| 0003b2a0:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b2b0:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b2c0:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b2d0:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b2e0:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b2f0:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b300:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b310:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b320:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b330:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b340:·6765·743d·2223·6964·6d38·3430·3722·2074··get="#idm8407"·t | |||
| 0003b350:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b360:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b370:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b380:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b390:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b3a0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b3b0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b3c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b3d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b3e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b3f0:·3d22·6964·6d38·3430·3722·3e3c·7461·626c··="idm8407"><tabl | |||
| 0003b400:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b410:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b420:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b430:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b440:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b4 | 0003b450:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b4 | 0003b460:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b450:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b460:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b470:·7 | 0003b470:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b480:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b490:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b4 | 0003b4a0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b490:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b4a0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b4b0:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b4c0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b4d0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b4e0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b4f0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b | 0003b4b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b4c0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b4d0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b4e0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b4f0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003b500:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003b510:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003b520:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003b530:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003b540:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003b550:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003b560:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003b570:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003b580:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003b590:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| Max diff block lines reached; 10301391/10333737 bytes (99.69%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·- | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·- |
| 43 | ··············Workstation | 43 | ··············Workstation |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 33 lines modified | Offset 105, 41 lines modified | ||
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package·--add=aide | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | include·install_aide | 117 | include·install_aide |
| 124 | class·install_aide·{ | 118 | class·install_aide·{ |
| 125 | ··package·{·'aide': | 119 | ··package·{·'aide': |
| 126 | ····ensure·=>·'installed', | 120 | ····ensure·=>·'installed', |
| 127 | ··} | 121 | ··} |
| 128 | } | 122 | } |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 129 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 130 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 131 | ····dnf·install·-y·"aide" | ||
| 132 | fi | ||
| 133 | else | ||
| 134 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 135 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 141 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 142 | ··package: |
| Offset 152, 36 lines modified | Offset 160, 28 lines modified | ||
| 152 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 161 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | [[packages]] | 163 | [[packages]] |
| 156 | name·=·"aide" | 164 | name·=·"aide" |
| 157 | version·=·"*" | 165 | version·=·"*" |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 165 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 166 | ····dnf·install·-y·"aide" | ||
| 167 | fi | ||
| 171 | package·install·aide | ||
| 168 | else | ||
| 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 170 | fi | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | package· | 177 | package·--add=aide |
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 179 | $·sudo·/usr/sbin/aide·--init | 180 | $·sudo·/usr/sbin/aide·--init |
| 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 181 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 182 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 182 | To·initiate·a·manual·check,·run·the·following·command: | 183 | To·initiate·a·manual·check,·run·the·following·command: |
| 183 | $·sudo·/usr/sbin/aide·--check | 184 | $·sudo·/usr/sbin/aide·--check |
| Offset 201, 14 lines modified | Offset 201, 28 lines modified | ||
| 201 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 201 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 202 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 202 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 203 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 203 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 204 | ·············_\x8c_\x8i_\x8s············6.1.1 | 204 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 205 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 205 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 206 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 206 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 207 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 207 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 209 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 210 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 211 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 212 | ····dnf·install·-y·"aide" | ||
| 213 | fi | ||
| 214 | /usr/sbin/aide·--init | ||
| 215 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 216 | else | ||
| 217 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 218 | fi | ||
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| Max diff block lines reached; 1264823/1270694 bytes (99.54%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e30:·3230·323 | 00037e30:·3230·3235·2d31·322d·3130·290a·2020·2020··2025-12-10).···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15150, 236 lines modified | Offset 15150, 236 lines modified | ||
| 0003b2d0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | 0003b2d0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | ||
| 0003b2e0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | 0003b2e0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b2f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b2f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b300:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b300:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b310:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b310:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b320:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b320:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b330:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b330:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b340:·7469·6f6e·20 | 0003b340:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | ||
| 0003b350:· | 0003b350:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b360:· | 0003b360:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b370:· | 0003b370:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b380:· | 0003b380:·7365·2220·6964·3d22·6964·6d38·3430·3622··se"·id="idm8406" | ||
| 0003b390:·3 | 0003b390:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b3a0:· | 0003b3a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b3b0:·6 | 0003b3b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b3c0:· | 0003b3c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b3d0:· | 0003b3d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b3e0:· | 0003b3e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b3f0:· | 0003b3f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b400:· | 0003b400:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b410:· | 0003b410:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b420:· | 0003b420:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b430:·6 | 0003b430:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b440:· | 0003b440:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b450:· | 0003b450:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b460:· | 0003b460:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003b470:· | 0003b470:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b480:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003b490:·6167·6520·2d2d·6164·643d·6169·6465·0a3c··age·--add=aide.< | |||
| 0003b4a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b4b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b4c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b4d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b4e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b4f0:·2223·6964·6d38·3430·3722·2074·6162·696e··"#idm8407"·tabin | |||
| 0003b500:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b510:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b520:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b530:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b540:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b550:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b560:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b570:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b580:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b590:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b5a0:·6964·6d38·3430·3722·3e3c·7461·626c·6520··idm8407"><table· | |||
| 0003b5b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b5c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b5d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b5e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b5f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b600:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b610:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b | 0003b480:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | ||
| 0003b490:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b4a0:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b4b0:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b4c0:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b4d0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b4e0:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b4f0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b500:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b510:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b520:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b530:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b540:·646d·3834·3037·2220·7461·6269·6e64·6578··dm8407"·tabindex | |||
| 0003b550:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b560:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b570:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b580:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b590:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b5a0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b5b0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b5c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b5d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b5e0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b5f0:·3037·223e·3c74·6162·6c65·2063·6c61·7373··07"><table·class | |||
| 0003b600:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b610:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b620:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b630:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b640:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b6 | 0003b650:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b660:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b640:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b650:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b660:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b670:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b680:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b690:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b6a0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b6b0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b6c0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b6d0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b6e0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b6f0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b700:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b710:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b720:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b730:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b740:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b750:·7267·6574·3d22·2369·646d·3834·3038·2220··rget="#idm8408"· | |||
| 0003b760:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b770:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b780:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b790:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b7a0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b7b0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b7c0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b7d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b7e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| Max diff block lines reached; 24917023/24949369 bytes (99.87%) of diff not shown. | |||
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037fe0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037ff0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037ff0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038000:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038000:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038010:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038010:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038020:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038020:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038030:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038030:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038040:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038040:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038050:·206f·6620·3230·323 | 00038050:·206f·6620·3230·3235·2d31·322d·3130·290a···of·2025-12-10). | ||
| 00038060:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038060:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038070:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038070:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038080:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038080:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038090:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038090:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000380a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000380a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000380b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000380b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000380c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000380c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15103, 200 lines modified | Offset 15103, 200 lines modified | ||
| 0003afe0:·2d74·6172·6765·743d·2223·6964·6d38·3933··-target="#idm893 | 0003afe0:·2d74·6172·6765·743d·2223·6964·6d38·3933··-target="#idm893 | ||
| 0003aff0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003aff0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003b000:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b000:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b010:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b010:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b020:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b020:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b030:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b030:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b040:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b040:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b050:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b060:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b070:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b080:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b090:·2220·6964·3d22·6964·6d38·3933·3122·3e3c··"·id="idm8931">< | |||
| 0003b0a0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003b0b0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b0c0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b0d0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b0e0:·6966·2028·205b·2021·202d·6620·2f2e·646f··if·(·[·!·-f·/.do | |||
| 0003b0f0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003b100:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003b110:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003b120:·2026·616d·703b·2661·6d70·3b20·2120·2820···&&·!·(· | |||
| 0003b130:·5b20·2224·7b63·6f6e·7461·696e·6572·3a2d··[·"${container:- | |||
| 0003b140:·7d22·203d·3d20·2262·7772·6170·2d6f·7362··}"·==·"bwrap-osb | |||
| 0003b150:·7569·6c64·2220·5d20·2920·293b·2074·6865··uild"·]·)·);·the | |||
| 0003b160:·6e0a·0a66·6970·732d·6d6f·6465·2d73·6574··n..fips-mode-set | |||
| 0003b170:·7570·202d·2d65·6e61·626c·650a·4649·5053··up·--enable.FIPS | |||
| 0003b180:·5f43·4f4e·463d·222f·6574·632f·6472·6163··_CONF="/etc/drac | |||
| 0003b190:·7574·2e63·6f6e·662e·642f·3430·2d66·6970··ut.conf.d/40-fip | |||
| 0003b1a0:·732e·636f·6e66·220a·6966·2021·2067·7265··s.conf".if·!·gre | |||
| 0003b1b0:·7020·225e·6164·645f·6472·6163·7574·6d6f··p·"^add_dracutmo | |||
| 0003b1c0:·6475·6c65·732b·3d5c·2220·6669·7073·205c··dules+=\"·fips·\ | |||
| 0003b1d0:·2222·2024·4649·5053·5f43·4f4e·463b·2074··""·$FIPS_CONF;·t | |||
| 0003b1e0:·6865·6e0a·2020·2020·6563·686f·2022·6164··hen.····echo·"ad | |||
| 0003b1f0:·645f·6472·6163·7574·6d6f·6475·6c65·732b··d_dracutmodules+ | |||
| 0003b200:·3d5c·2220·6669·7073·205c·2222·2026·6774··=\"·fips·\""·> | |||
| 0003b210:·3b26·6774·3b20·2446·4950·535f·434f·4e46··;>·$FIPS_CONF | |||
| 0003b220:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003b230:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b240:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b250:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b260:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b270:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003b280:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b290:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b2a0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b2b0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b2c0:·6765·743d·2223·6964·6d38·3933·3222·2074··get="#idm8932"·t | |||
| 0003b2d0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b2e0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b2f0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b300:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b310:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b320:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b | 0003b330:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b | 0003b340:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b350:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b360:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003b370:·2069·643d·2269·646d·3839·3332·223e·3c74···id="idm8932"><t | ||
| 0003b | 0003b380:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003b390:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003b3a0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003b3b0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003b3c0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b0f0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b100:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 0003b110:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b | 0003b3d0:·7479·3a3c·2f74·683e·3c74·643e·6d65·6469··ty:</th><td>medi | ||
| 0003b | 0003b3e0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003b3f0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b400:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | |||
| 0003b410:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003b420:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b150:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003b160:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b170:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003b | 0003b430:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | ||
| 0003b440:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b450:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003b460:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b | 0003b470:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003b | 0003b480:·616d·653a·2043·6865·636b·2074·6f20·7365··ame:·Check·to·se | ||
| 0003b | 0003b490:·6520·7468·6520·6375·7272·656e·7420·7374··e·the·current·st | ||
| 0003b | 0003b4a0:·6174·7573·206f·6620·4649·5053·206d·6f64··atus·of·FIPS·mod | ||
| 0003b | 0003b4b0:·650a·2020·636f·6d6d·616e·643a·202f·7573··e.··command:·/us | ||
| 0003b | 0003b4c0:·722f·6269·6e2f·6669·7073·2d6d·6f64·652d··r/bin/fips-mode- | ||
| 0003b | 0003b4d0:·7365·7475·7020·2d2d·6368·6563·6b0a·2020··setup·--check.·· | ||
| 0003b | 0003b4e0:·7265·6769·7374·6572·3a20·6973·5f66·6970··register:·is_fip | ||
| 0003b | 0003b4f0:·735f·656e·6162·6c65·640a·2020·6368·616e··s_enabled.··chan | ||
| 0003b | 0003b500:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | ||
| 0003b | 0003b510:·2020·6661·696c·6564·5f77·6865·6e3a·2066····failed_when:·f | ||
| 0003b | 0003b520:·616c·7365·0a20·2077·6865·6e3a·2028·2061··alse.··when:·(·a | ||
| 0003b | 0003b530:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 0003b | 0003b540:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 0003b | 0003b550:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | ||
| 0003b | 0003b560:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | ||
| 0003b | 0003b570:·6f64·6d61·6e22·2c0a·2020·2020·2263·6f6e··odman",.····"con | ||
| 0003b | 0003b580:·7461·696e·6572·225d·2061·6e64·206e·6f74··tainer"]·and·not | ||
| 0003b | 0003b590:·2028·206c·6f6f·6b75·7028·2265·6e76·222c···(·lookup("env", | ||
| 0003b | 0003b5a0:·2022·636f·6e74·6169·6e65·7222·2920·3d3d···"container")·== | ||
| 0003b | 0003b5b0:·2022·6277·7261·702d·6f73·6275·696c·6422···"bwrap-osbuild" | ||
| 0003b | 0003b5c0:·2029·2029·0a20·2074·6167·733a·0a20·202d···)·).··tags:.··- | ||
| 0003b | 0003b5d0:·2043·4345·2d38·3635·3437·2d37·0a20·202d···CCE-86547-7.··- | ||
| 0003b | 0003b5e0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | ||
| 0003b | 0003b5f0:·3039·2d36·3731·3031·300a·2020·2d20·4e49··09-671010.··-·NI | ||
| 0003b600:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b | 0003b610:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b330:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 0003b | 0003b620:·332d·4941·2d37·0a20·202d·204e·4953·542d··3-IA-7.··-·NIST- | ||
| 0003b630:·3830·302d·3533·2d53·432d·3132·0a20·202d··800-53-SC-12.··- | |||
| 0003b | 0003b640:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | ||
| 0003b650:·3132·2832·290a·2020·2d20·4e49·5354·2d38··12(2).··-·NIST-8 | |||
| Max diff block lines reached; 6218037/6245415 bytes (99.56%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information |
| 51 | ··············Systems·and·Organizations·(NIST·800-171) | 51 | ··············Systems·and·Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:9 | 54 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 63 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 14 lines modified | Offset 101, 27 lines modified | ||
| 101 | ·············_\x8i_\x8s_\x8m······1446 | 101 | ·············_\x8i_\x8s_\x8m······1446 |
| 102 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 102 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 103 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 103 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 110 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 111 | fips-mode-setup·--enable | ||
| 112 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 113 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 114 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 115 | fi | ||
| 116 | else | ||
| 117 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 118 | fi | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 113 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 124 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 114 | ··command:·/usr/bin/fips-mode-setup·--check | 125 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 172, 27 lines modified | Offset 185, 14 lines modified | ||
| 172 | ··-·NIST-800-53-SC-13 | 185 | ··-·NIST-800-53-SC-13 |
| 173 | ··-·enable_dracut_fips_module | 186 | ··-·enable_dracut_fips_module |
| 174 | ··-·high_severity | 187 | ··-·high_severity |
| 175 | ··-·medium_complexity | 188 | ··-·medium_complexity |
| 176 | ··-·medium_disruption | 189 | ··-·medium_disruption |
| 177 | ··-·reboot_required | 190 | ··-·reboot_required |
| 178 | ··-·restrict_strategy | 191 | ··-·restrict_strategy |
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 181 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 182 | fips-mode-setup·--enable | ||
| 183 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 184 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 185 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 186 | fi | ||
| 187 | else | ||
| 188 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 189 | fi | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | To·enable·FIPS·mode,·run·the·following·command: | 193 | To·enable·FIPS·mode,·run·the·following·command: |
| 192 | fips-mode-setup·--enable | 194 | fips-mode-setup·--enable |
| 193 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 195 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 194 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 196 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 195 | ····*·Creating·/etc/system-fips | 197 | ····*·Creating·/etc/system-fips |
| Offset 208, 14 lines modified | Offset 208, 41 lines modified | ||
| 208 | ·············_\x8i_\x8s_\x8m······1446 | 208 | ·············_\x8i_\x8s_\x8m······1446 |
| 209 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 209 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 210 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 210 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 211 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 211 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 212 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 212 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 218 | var_system_crypto_policy='FIPS' | ||
| 219 | fips-mode-setup·--enable | ||
| 220 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 221 | rc=$? | ||
| 222 | if·test·"$rc"·=·127;·then | ||
| 223 | » echo·"$stderr_of_call"·>&2 | ||
| 224 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 225 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 226 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 227 | » false··#·end·with·an·error·code | ||
| 228 | elif·test·"$rc"·!=·0;·then | ||
| 229 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 230 | » false··#·end·with·an·error·code | ||
| 231 | fi | ||
| 232 | else | ||
| 233 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 234 | fi | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 236 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 237 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 238 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 239 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 220 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 240 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 221 | ··set_fact: | 241 | ··set_fact: |
| Offset 323, 41 lines modified | Offset 350, 14 lines modified | ||
| 323 | ··-·medium_disruption | 350 | ··-·medium_disruption |
| 324 | ··-·reboot_required | 351 | ··-·reboot_required |
| 325 | ··-·restrict_strategy | 352 | ··-·restrict_strategy |
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 353 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 327 | [customizations] | 354 | [customizations] |
| 328 | fips·=·true | 355 | fips·=·true |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 330 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 331 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 332 | var_system_crypto_policy='FIPS' | ||
| Max diff block lines reached; 861942/868734 bytes (99.22%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037dc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037dd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037dd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037de0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037de0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037df0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037df0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e30:·3032·3 | 00037e30:·3032·352d·3132·2d31·3029·0a20·2020·2020··025-12-10).····· | ||
| 00037e40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037e80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037e80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037e90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037e90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ea0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ea0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15183, 306 lines modified | Offset 15183, 306 lines modified | ||
| 0003b4e0:·7461·7267·6574·3d22·2369·646d·3830·3632··target="#idm8062 | 0003b4e0:·7461·7267·6574·3d22·2369·646d·3830·3632··target="#idm8062 | ||
| 0003b4f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b4f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b500:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b500:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b510:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b510:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b520:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b520:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b530:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b530:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b540:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b540:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b550:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b560:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b570:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b580:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b590:·2069·643d·2269·646d·3830·3632·223e·3c70···id="idm8062"><p | |||
| 0003b5a0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003b5b0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003b5c0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003b5d0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003b5e0:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003b5f0:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003b600:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003b610:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003b620:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003b630:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003b640:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003b650:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003b660:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003b670:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003b680:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003b690:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b6a0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003b6b0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003b6c0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003b6d0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003b6e0:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003b6f0:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003b700:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003b710:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003b720:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003b730:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003b740:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003b750:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003b760:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003b770:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | |||
| 0003b780:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003b790:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003b7a0:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003b7b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b7c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b7d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b7e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b7f0:·7461·7267·6574·3d22·2369·646d·3830·3633··target="#idm8063 | |||
| 0003b800:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b810:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b820:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b830:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b840:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b850:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003b860:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003b | 0003b870:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b | 0003b880:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b890:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b8a0:·7365·2220·6964·3d22·6964·6d38·3036·3322··se"·id="idm8063" | ||
| 0003b | 0003b8b0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003b8c0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b8d0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b8e0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b8f0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b900:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003b | 0003b910:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003b | 0003b920:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003b930:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003b | 0003b940:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b950:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003b960:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003b970:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003b980:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b | 0003b990:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b | 0003b9a0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b | 0003b9b0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003b | 0003b9c0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003b | 0003b9d0:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003b | 0003b9e0:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003b | 0003b9f0:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003b | 0003ba00:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003b | 0003ba10:·6d64·3a20·646e·6620·7265·696e·7374·616c··md:·dnf·reinstal | ||
| 0003b | 0003ba20:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003b | 0003ba30:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003b | 0003ba40:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003b | 0003ba50:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003b | 0003ba60:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003b | 0003ba70:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003b | 0003ba80:·2043·4345·2d39·3038·3431·2d38·0a20·202d···CCE-90841-8.··- | ||
| 0003b | 0003ba90:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003b | 0003baa0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003bab0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003b | 0003bac0:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003b | 0003bad0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003b | 0003bae0:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003b | 0003baf0:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003b | 0003bb00:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b | 0003bb10:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003b | 0003bb20:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003b | 0003bb30:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003b | 0003bb40:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003bb50:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003b | 0003bb60:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003b | 0003bb70:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003b | 0003bb80:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003b | 0003bb90:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003b | 0003bba0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003b | 0003bbb0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003b | 0003bbc0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| Max diff block lines reached; 6522373/6564379 bytes (99.36%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 104, 14 lines modified | Offset 104, 27 lines modified | ||
| 104 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 104 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 105 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 105 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 113 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 114 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 115 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 116 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 117 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 118 | fi | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 116 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 124 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 117 | ··set_fact: | 125 | ··set_fact: |
| Offset 243, 27 lines modified | Offset 256, 14 lines modified | ||
| 243 | ··-·PCI-DSSv4-11.5.2 | 256 | ··-·PCI-DSSv4-11.5.2 |
| 244 | ··-·high_complexity | 257 | ··-·high_complexity |
| 245 | ··-·high_severity | 258 | ··-·high_severity |
| 246 | ··-·medium_disruption | 259 | ··-·medium_disruption |
| 247 | ··-·no_reboot_needed | 260 | ··-·no_reboot_needed |
| 248 | ··-·restrict_strategy | 261 | ··-·restrict_strategy |
| 249 | ··-·rpm_verify_hashes | 262 | ··-·rpm_verify_hashes |
| 250 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 251 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 252 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 253 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 254 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 255 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 256 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 257 | fi | ||
| 258 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 263 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 259 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 264 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 260 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 265 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 261 | run·the·following·command·to·determine·which·package·owns·it: | 266 | run·the·following·command·to·determine·which·package·owns·it: |
| 262 | $·rpm·-qf·FILENAME | 267 | $·rpm·-qf·FILENAME |
| 263 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 268 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 264 | $·sudo·rpm·--setugids·PACKAGENAME | 269 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 283, 14 lines modified | Offset 283, 40 lines modified | ||
| 283 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 283 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 284 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 284 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 285 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 285 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 286 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 286 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 287 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 287 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 288 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 288 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 289 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 289 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 295 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 296 | declare·-A·SETPERMS_RPM_DICT | ||
| 297 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 298 | #·is·expected·by·the·RPM·database | ||
| 299 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 300 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 301 | do | ||
| 302 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 303 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 304 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 305 | done | ||
| 306 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 307 | #·correct·values | ||
| 308 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 309 | do | ||
| 310 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 311 | done | ||
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 295 | -·name:·Read·list·of·files·with·incorrect·ownership | 317 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 296 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 318 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 368, 40 lines modified | Offset 394, 14 lines modified | ||
| 368 | ··-·PCI-DSSv4-11.5.2 | 394 | ··-·PCI-DSSv4-11.5.2 |
| 369 | ··-·high_complexity | 395 | ··-·high_complexity |
| 370 | ··-·high_severity | 396 | ··-·high_severity |
| 371 | ··-·medium_disruption | 397 | ··-·medium_disruption |
| 372 | ··-·no_reboot_needed | 398 | ··-·no_reboot_needed |
| 373 | ··-·restrict_strategy | 399 | ··-·restrict_strategy |
| 374 | ··-·rpm_verify_ownership | 400 | ··-·rpm_verify_ownership |
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 378 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 379 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 380 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 699886/707792 bytes (98.88%) of diff not shown. | |||
| Offset 14320, 16 lines modified | Offset 14320, 16 lines modified | ||
| 00037ef0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037ef0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037f00:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037f00:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037f10:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037f10:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037f20:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037f20:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037f30:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037f30:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037f40:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037f40:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037f50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f60:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037f60:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037f70:·313 | 00037f70:·3132·2d31·3029·0a20·2020·2020·2020·2020··12-10).········· | ||
| 00037f80:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037f80:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037f90:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037f90:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037fa0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037fa0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037fb0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037fb0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037fc0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037fc0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037fd0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037fd0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037fe0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037fe0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15204, 306 lines modified | Offset 15204, 306 lines modified | ||
| 0003b630:·7461·7267·6574·3d22·2369·646d·3830·3632··target="#idm8062 | 0003b630:·7461·7267·6574·3d22·2369·646d·3830·3632··target="#idm8062 | ||
| 0003b640:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b640:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b650:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b650:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b660:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b660:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b670:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b670:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b680:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b680:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b690:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b690:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b6a0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b6b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b6c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b6d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b6e0:·2069·643d·2269·646d·3830·3632·223e·3c70···id="idm8062"><p | |||
| 0003b6f0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003b700:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003b710:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003b720:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003b730:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003b740:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003b750:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003b760:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003b770:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003b6a0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b6b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b6c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b6d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b6e0:·7365·2220·6964·3d22·6964·6d38·3036·3222··se"·id="idm8062" | |||
| 0003b6f0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b700:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b710:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b720:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b730:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b740:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | |||
| 0003b750:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | |||
| 0003b760:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b770:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0003b780:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b790:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b7a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b7b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b7c0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | |||
| 0003b7d0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | |||
| 0003b7e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b7f0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | |||
| 0003b800:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | |||
| 0003b810:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | |||
| 0003b820:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | |||
| 0003b830:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | |||
| 0003b840:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | |||
| 0003b850:·6d64·3a20·646e·6620·7265·696e·7374·616c··md:·dnf·reinstal | |||
| 0003b860:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | |||
| 0003b870:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | |||
| 0003b880:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | |||
| 0003b890:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | |||
| 0003b8a0:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | |||
| 0003b8b0:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | |||
| 0003b8c0:·2043·4345·2d39·3038·3431·2d38·0a20·202d···CCE-90841-8.··- | |||
| 0003b8d0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | |||
| 0003b8e0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003b8f0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | |||
| 0003b900:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | |||
| 0003b910:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | |||
| 0003b920:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | |||
| 0003b930:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | |||
| 0003b940:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b950:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | |||
| 0003b960:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | |||
| 0003b970:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | |||
| 0003b980:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b990:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | |||
| 0003b9a0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b9b0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b9c0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | |||
| 0003b9d0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | |||
| 0003b9e0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | |||
| 0003b9f0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | |||
| 0003ba00:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003ba10:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | |||
| 0003ba20:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | |||
| 0003ba30:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | |||
| 0003ba40:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | |||
| 0003ba50:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | |||
| 0003ba60:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | |||
| 0003ba70:·6f6d·6d61·6e64·2028·7a79·7070·6572·2927··ommand·(zypper)' | |||
| 0003ba80:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | |||
| 0003ba90:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | |||
| 0003baa0:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | |||
| 0003bab0:·7a79·7070·6572·2069·6e20·2d66·202d·790a··zypper·in·-f·-y. | |||
| 0003bac0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003bad0:·6469·7374·7269·6275·7469·6f6e·203d·3d20··distribution·==· | |||
| 0003bae0:·2253·4c45·5322·0a20·2074·6167·733a·0a20··"SLES".··tags:.· | |||
| 0003baf0:·202d·2043·4345·2d39·3038·3431·2d38·0a20···-·CCE-90841-8.· | |||
| 0003bb00:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | |||
| 0003bb10:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | |||
| 0003bb20:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | |||
| 0003bb30:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | |||
| 0003bb40:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | |||
| 0003bb50:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | |||
| 0003bb60:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | |||
| 0003bb70:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003bb80:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | |||
| 0003bb90:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | |||
| 0003bba0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003bbb0:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | |||
| 0003bbc0:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | |||
| 0003bbd0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bbe0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003bbf0:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | |||
| 0003bc00:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | |||
| 0003bc10:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | |||
| 0003bc20:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | |||
| Max diff block lines reached; 17090834/17132978 bytes (99.75%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:9 | 50 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 109, 14 lines modified | Offset 109, 27 lines modified | ||
| 109 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 109 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 110 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 110 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 111 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 118 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 119 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 120 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 121 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 122 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 123 | fi | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 121 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 129 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 122 | ··set_fact: | 130 | ··set_fact: |
| Offset 248, 27 lines modified | Offset 261, 14 lines modified | ||
| 248 | ··-·PCI-DSSv4-11.5.2 | 261 | ··-·PCI-DSSv4-11.5.2 |
| 249 | ··-·high_complexity | 262 | ··-·high_complexity |
| 250 | ··-·high_severity | 263 | ··-·high_severity |
| 251 | ··-·medium_disruption | 264 | ··-·medium_disruption |
| 252 | ··-·no_reboot_needed | 265 | ··-·no_reboot_needed |
| 253 | ··-·restrict_strategy | 266 | ··-·restrict_strategy |
| 254 | ··-·rpm_verify_hashes | 267 | ··-·rpm_verify_hashes |
| 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 256 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 257 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 258 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 259 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 260 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 261 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 262 | fi | ||
| 263 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 268 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 264 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 269 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 265 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 270 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 266 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 271 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 267 | $·rpm·-qf·FILENAME | 272 | $·rpm·-qf·FILENAME |
| 268 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 273 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 290, 14 lines modified | Offset 290, 44 lines modified | ||
| 290 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 290 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 291 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 291 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 292 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 292 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 293 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 293 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 294 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 294 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 295 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 295 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 302 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 303 | declare·-A·SETPERMS_RPM_DICT | ||
| 304 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 305 | #·is·expected·by·the·RPM·database | ||
| 306 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 307 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 308 | do | ||
| 309 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 310 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 311 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 312 | ········do | ||
| 313 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 314 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 315 | ········done | ||
| 316 | done | ||
| 317 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 318 | #·correct·values | ||
| 319 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 320 | do | ||
| 321 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 322 | done | ||
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 302 | -·name:·Read·list·of·files·with·incorrect·permissions | 328 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 303 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 329 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 378, 44 lines modified | Offset 408, 14 lines modified | ||
| 378 | ··-·PCI-DSSv4-11.5.2 | 408 | ··-·PCI-DSSv4-11.5.2 |
| 379 | ··-·high_complexity | 409 | ··-·high_complexity |
| 380 | ··-·high_severity | 410 | ··-·high_severity |
| 381 | ··-·medium_disruption | 411 | ··-·medium_disruption |
| 382 | ··-·no_reboot_needed | 412 | ··-·no_reboot_needed |
| 383 | ··-·restrict_strategy | 413 | ··-·restrict_strategy |
| 384 | ··-·rpm_verify_permissions | 414 | ··-·rpm_verify_permissions |
| 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1270440/1278737 bytes (99.35%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037e80:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037e90:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037e90:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ea0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ea0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037eb0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037eb0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037ec0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037ec0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037ed0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037ed0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ef0:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037ef0:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037f00:·313 | 00037f00:·3132·2d31·3029·0a20·2020·2020·2020·2020··12-10).········· | ||
| 00037f10:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037f10:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037f20:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037f20:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037f30:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037f30:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037f40:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037f40:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037f50:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037f50:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037f60:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037f60:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037f70:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037f70:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15217, 306 lines modified | Offset 15217, 306 lines modified | ||
| 0003b700:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b700:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b710:·6d38·3036·3222·2074·6162·696e·6465·783d··m8062"·tabindex= | 0003b710:·6d38·3036·3222·2074·6162·696e·6465·783d··m8062"·tabindex= | ||
| 0003b720:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b720:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b730:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b730:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b740:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b740:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b750:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b750:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b760:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b760:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b770:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b780:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b790:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b7a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b7b0:·6170·7365·2220·6964·3d22·6964·6d38·3036··apse"·id="idm806 | |||
| 0003b7c0:·3222·3e3c·7072·653e·3c63·6f64·653e·0a23··2"><pre><code>.# | |||
| 0003b7d0:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | |||
| 0003b7e0:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | |||
| 0003b7f0:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | |||
| 0003b800:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | |||
| 0003b810:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | |||
| 0003b820:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | |||
| 0003b830:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | |||
| 0003b840:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | |||
| 0003b850:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b860:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | |||
| 0003b870:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | |||
| 0003b880:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | |||
| 0003b890:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | |||
| 0003b8a0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | |||
| 0003b8b0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b8c0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | |||
| 0003b8d0:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | |||
| 0003b8e0:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | |||
| 0003b8f0:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | |||
| 0003b900:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | |||
| 0003b910:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | |||
| 0003b920:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | |||
| 0003b930:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | |||
| 0003b940:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | |||
| 0003b950:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | |||
| 0003b960:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | |||
| 0003b970:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b980:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | |||
| 0003b990:·0a0a·2020·2020·0a20·2020·2064·6e66·2072··..····.····dnf·r | |||
| 0003b9a0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | |||
| 0003b9b0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003b9c0:·6c6c·0a20·2020·200a·6669·0a3c·2f63·6f64··ll.····.fi.</cod | |||
| 0003b9d0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b9e0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b9f0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ba00:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ba10:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003ba20:·6d38·3036·3322·2074·6162·696e·6465·783d··m8063"·tabindex= | |||
| 0003ba30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003ba40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003ba50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003ba60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003ba70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003ba80:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b | 0003ba90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b | 0003baa0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003bab0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003bac0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003bad0:·3830·3633·223e·3c74·6162·6c65·2063·6c61··8063"><table·cla | ||
| 0003b | 0003bae0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003baf0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003bb00:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003bb10:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003bb20:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003bb30:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b | 0003bb40:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003bb50:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b | 0003bb60:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b | 0003bb70:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003bb80:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003bb90:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003bba0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b | 0003bbb0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b | 0003bbc0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b | 0003bbd0:·6f64·653e·2d20·6e61·6d65·3a20·2753·6574··ode>-·name:·'Set | ||
| 0003b | 0003bbe0:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| 0003b | 0003bbf0:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | ||
| 0003b | 0003bc00:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | ||
| 0003b | 0003bc10:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003b | 0003bc20:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003b | 0003bc30:·616c·6c5f·636d·643a·2064·6e66·2072·6569··all_cmd:·dnf·rei | ||
| 0003b | 0003bc40:·6e73·7461·6c6c·202d·790a·2020·7768·656e··nstall·-y.··when | ||
| 0003b | 0003bc50:·3a20·616e·7369·626c·655f·6469·7374·7269··:·ansible_distri | ||
| 0003b | 0003bc60:·6275·7469·6f6e·2069·6e20·5b20·2246·6564··bution·in·[·"Fed | ||
| 0003b | 0003bc70:·6f72·6122·2c20·2252·6564·4861·7422·2c20··ora",·"RedHat",· | ||
| 0003b | 0003bc80:·2243·656e·744f·5322·2c20·224f·7261·636c··"CentOS",·"Oracl | ||
| 0003b | 0003bc90:·654c·696e·7578·2220·5d0a·2020·7461·6773··eLinux"·].··tags | ||
| 0003b | 0003bca0:·3a0a·2020·2d20·4343·452d·3930·3834·312d··:.··-·CCE-90841- | ||
| 0003b | 0003bcb0:·380a·2020·2d20·434a·4953·2d35·2e31·302e··8.··-·CJIS-5.10. | ||
| 0003b9b0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | |||
| 0003b9c0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | |||
| 0003b9d0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | |||
| 0003b9e0:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | |||
| 0003b9f0:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | |||
| 0003ba00:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | |||
| 0003ba10:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003ba20:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | |||
| 0003ba30:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | |||
| 0003ba40:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003ba50:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | |||
| 0003ba60:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | |||
| 0003ba70:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003ba80:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003ba90:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | |||
| 0003baa0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | |||
| 0003bab0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | |||
| 0003bac0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | |||
| Max diff block lines reached; 9904128/9946272 bytes (99.58%) of diff not shown. | |||
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux:9 | 48 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 14 lines modified | Offset 111, 27 lines modified | ||
| 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 131 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 124 | ··set_fact: | 132 | ··set_fact: |
| Offset 250, 27 lines modified | Offset 263, 14 lines modified | ||
| 250 | ··-·PCI-DSSv4-11.5.2 | 263 | ··-·PCI-DSSv4-11.5.2 |
| 251 | ··-·high_complexity | 264 | ··-·high_complexity |
| 252 | ··-·high_severity | 265 | ··-·high_severity |
| 253 | ··-·medium_disruption | 266 | ··-·medium_disruption |
| 254 | ··-·no_reboot_needed | 267 | ··-·no_reboot_needed |
| 255 | ··-·restrict_strategy | 268 | ··-·restrict_strategy |
| 256 | ··-·rpm_verify_hashes | 269 | ··-·rpm_verify_hashes |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 258 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 259 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 260 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 261 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 262 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 263 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 264 | fi | ||
| 265 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 266 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 271 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 267 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 272 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 268 | run·the·following·command·to·determine·which·package·owns·it: | 273 | run·the·following·command·to·determine·which·package·owns·it: |
| 269 | $·rpm·-qf·FILENAME | 274 | $·rpm·-qf·FILENAME |
| 270 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 271 | $·sudo·rpm·--setugids·PACKAGENAME | 276 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 290, 14 lines modified | Offset 290, 40 lines modified | ||
| 290 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 290 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 291 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 291 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 292 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 292 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 293 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 293 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 294 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 294 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 295 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 295 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 302 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 303 | declare·-A·SETPERMS_RPM_DICT | ||
| 304 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 305 | #·is·expected·by·the·RPM·database | ||
| 306 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 307 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 308 | do | ||
| 309 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 310 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 311 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 312 | done | ||
| 313 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 314 | #·correct·values | ||
| 315 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 316 | do | ||
| 317 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 318 | done | ||
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 320 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 321 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 322 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 323 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 302 | -·name:·Read·list·of·files·with·incorrect·ownership | 324 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 303 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 325 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 375, 40 lines modified | Offset 401, 14 lines modified | ||
| 375 | ··-·PCI-DSSv4-11.5.2 | 401 | ··-·PCI-DSSv4-11.5.2 |
| 376 | ··-·high_complexity | 402 | ··-·high_complexity |
| 377 | ··-·high_severity | 403 | ··-·high_severity |
| 378 | ··-·medium_disruption | 404 | ··-·medium_disruption |
| 379 | ··-·no_reboot_needed | 405 | ··-·no_reboot_needed |
| 380 | ··-·restrict_strategy | 406 | ··-·restrict_strategy |
| 381 | ··-·rpm_verify_ownership | 407 | ··-·rpm_verify_ownership |
| 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 383 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 384 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 385 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 386 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 387 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1019576/1027482 bytes (99.23%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037e50:·313 | 00037e50:·3132·2d31·3029·0a20·2020·2020·2020·2020··12-10).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15070, 200 lines modified | Offset 15070, 200 lines modified | ||
| 0003add0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003add0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003ade0:·2369·646d·3839·3331·2220·7461·6269·6e64··#idm8931"·tabind | 0003ade0:·2369·646d·3839·3331·2220·7461·6269·6e64··#idm8931"·tabind | ||
| 0003adf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003adf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003ae00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003ae00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003ae10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003ae10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003ae20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003ae20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003ae30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003ae30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003ae40:·5265·6d65·6469·6174·696f·6e20· | 0003ae40:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003ae50:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003ae60:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ae70:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ae80:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ae90:·3839·3331·223e·3c70·7265·3e3c·636f·6465··8931"><pre><code | |||
| 0003aea0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003aeb0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003aec0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003aed0:·7466·6f72·6d73·0a69·6620·2820·5b20·2120··tforms.if·(·[·!· | |||
| 0003aee0:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003aef0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003af00:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003af10:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003af20:·703b·2021·2028·205b·2022·247b·636f·6e74··p;·!·(·[·"${cont | |||
| 0003af30:·6169·6e65·723a·2d7d·2220·3d3d·2022·6277··ainer:-}"·==·"bw | |||
| 0003af40:·7261·702d·6f73·6275·696c·6422·205d·2029··rap-osbuild"·]·) | |||
| 0003af50:·2029·3b20·7468·656e·0a0a·6669·7073·2d6d···);·then..fips-m | |||
| 0003af60:·6f64·652d·7365·7475·7020·2d2d·656e·6162··ode-setup·--enab | |||
| 0003af70:·6c65·0a46·4950·535f·434f·4e46·3d22·2f65··le.FIPS_CONF="/e | |||
| 0003af80:·7463·2f64·7261·6375·742e·636f·6e66·2e64··tc/dracut.conf.d | |||
| 0003af90:·2f34·302d·6669·7073·2e63·6f6e·6622·0a69··/40-fips.conf".i | |||
| 0003afa0:·6620·2120·6772·6570·2022·5e61·6464·5f64··f·!·grep·"^add_d | |||
| 0003afb0:·7261·6375·746d·6f64·756c·6573·2b3d·5c22··racutmodules+=\" | |||
| 0003afc0:·2066·6970·7320·5c22·2220·2446·4950·535f···fips·\""·$FIPS_ | |||
| 0003afd0:·434f·4e46·3b20·7468·656e·0a20·2020·2065··CONF;·then.····e | |||
| 0003afe0:·6368·6f20·2261·6464·5f64·7261·6375·746d··cho·"add_dracutm | |||
| 0003aff0:·6f64·756c·6573·2b3d·5c22·2066·6970·7320··odules+=\"·fips· | |||
| 0003b000:·5c22·2220·2667·743b·2667·743b·2024·4649··\""·>>·$FI | |||
| 0003b010:·5053·5f43·4f4e·460a·6669·0a0a·656c·7365··PS_CONF.fi..else | |||
| 0003b020:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003b030:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003b040:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b050:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b060:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b070:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b080:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b090:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b0a0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b0b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b0c0:·3839·3332·2220·7461·6269·6e64·6578·3d22··8932"·tabindex=" | |||
| 0003b0d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b0e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b0f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b100:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b110:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b120:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003 | 0003b130:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003ae60:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003 | 0003b140:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b150:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003 | 0003b160:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | ||
| 0003ae90:·6964·6d38·3933·3122·3e3c·7461·626c·6520··idm8931"><table· | |||
| 0003 | 0003b170:·3933·3222·3e3c·7461·626c·6520·636c·6173··932"><table·clas | ||
| 0003b180:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003 | 0003b190:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003 | 0003b1a0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b1b0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b1c0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003aed0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003aee0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003aef0:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | |||
| 0003af00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003af10:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003 | 0003b1d0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003 | 0003b1e0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b1f0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003b200:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003b210:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b220:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0003b230:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003 | 0003b240:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b250:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b260:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b270:·6f64·653e·2d20·6e61·6d65·3a20·4368·6563··ode>-·name:·Chec | |||
| 0003b280:·6b20·746f·2073·6565·2074·6865·2063·7572··k·to·see·the·cur | |||
| 0003af50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003af60:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003af70:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003af80:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003af90:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003afa0:·4368·6563·6b20·746f·2073·6565·2074·6865··Check·to·see·the | |||
| 0003 | 0003b290:·7265·6e74·2073·7461·7475·7320·6f66·2046··rent·status·of·F | ||
| 0003 | 0003b2a0:·4950·5320·6d6f·6465·0a20·2063·6f6d·6d61··IPS·mode.··comma | ||
| 0003afd0:·6f6d·6d61·6e64·3a20·2f75·7372·2f62·696e··ommand:·/usr/bin | |||
| 0003 | 0003b2b0:·6e64·3a20·2f75·7372·2f62·696e·2f66·6970··nd:·/usr/bin/fip | ||
| 0003b2c0:·732d·6d6f·6465·2d73·6574·7570·202d·2d63··s-mode-setup·--c | |||
| 0003 | 0003b2d0:·6865·636b·0a20·2072·6567·6973·7465·723a··heck.··register: | ||
| 0003b000:·7465·723a·2069·735f·6669·7073·5f65·6e61··ter:·is_fips_ena | |||
| 0003b010:·626c·6564·0a20·2063·6861·6e67·6564·5f77··bled.··changed_w | |||
| 0003b020:·6865·6e3a·2066·616c·7365·0a20·2066·6169··hen:·false.··fai | |||
| 0003b030:·6c65·645f·7768·656e·3a20·6661·6c73·650a··led_when:·false. | |||
| 0003b040:·2020·7768·656e·3a20·2820·616e·7369·626c····when:·(·ansibl | |||
| 0003b050:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b060:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b070:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b080:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b090:·222c·0a20·2020·2022·636f·6e74·6169·6e65··",.····"containe | |||
| 0003b0a0:·7222·5d20·616e·6420·6e6f·7420·2820·6c6f··r"]·and·not·(·lo | |||
| 0003b0b0:·6f6b·7570·2822·656e·7622·2c20·2263·6f6e··okup("env",·"con | |||
| 0003b0c0:·7461·696e·6572·2229·203d·3d20·2262·7772··tainer")·==·"bwr | |||
| 0003b0d0:·6170·2d6f·7362·7569·6c64·2220·2920·290a··ap-osbuild"·)·). | |||
| 0003b0e0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| Max diff block lines reached; 6224868/6244656 bytes (99.68%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 92, 14 lines modified | Offset 92, 27 lines modified | ||
| 92 | ·············_\x8i_\x8s_\x8m······1446 | 92 | ·············_\x8i_\x8s_\x8m······1446 |
| 93 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 93 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 94 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 94 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 95 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 95 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 96 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 96 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 97 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 97 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 98 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 98 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 100 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 101 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 102 | fips-mode-setup·--enable | ||
| 103 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 104 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 105 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 106 | fi | ||
| 107 | else | ||
| 108 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 109 | fi | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 104 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 115 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 105 | ··command:·/usr/bin/fips-mode-setup·--check | 116 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 163, 27 lines modified | Offset 176, 14 lines modified | ||
| 163 | ··-·NIST-800-53-SC-13 | 176 | ··-·NIST-800-53-SC-13 |
| 164 | ··-·enable_dracut_fips_module | 177 | ··-·enable_dracut_fips_module |
| 165 | ··-·high_severity | 178 | ··-·high_severity |
| 166 | ··-·medium_complexity | 179 | ··-·medium_complexity |
| 167 | ··-·medium_disruption | 180 | ··-·medium_disruption |
| 168 | ··-·reboot_required | 181 | ··-·reboot_required |
| 169 | ··-·restrict_strategy | 182 | ··-·restrict_strategy |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 171 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 172 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 173 | fips-mode-setup·--enable | ||
| 174 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 175 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 176 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 177 | fi | ||
| 178 | else | ||
| 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 180 | fi | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | To·enable·FIPS·mode,·run·the·following·command: | 184 | To·enable·FIPS·mode,·run·the·following·command: |
| 183 | fips-mode-setup·--enable | 185 | fips-mode-setup·--enable |
| 184 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 186 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 185 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 187 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 186 | ····*·Creating·/etc/system-fips | 188 | ····*·Creating·/etc/system-fips |
| Offset 199, 14 lines modified | Offset 199, 41 lines modified | ||
| 199 | ·············_\x8i_\x8s_\x8m······1446 | 199 | ·············_\x8i_\x8s_\x8m······1446 |
| 200 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 200 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 201 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 201 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 202 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 202 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 204 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 204 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 205 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 205 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 207 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 208 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 209 | var_system_crypto_policy='FIPS:OSPP' | ||
| 210 | fips-mode-setup·--enable | ||
| 211 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 212 | rc=$? | ||
| 213 | if·test·"$rc"·=·127;·then | ||
| 214 | » echo·"$stderr_of_call"·>&2 | ||
| 215 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 216 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 217 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 218 | » false··#·end·with·an·error·code | ||
| 219 | elif·test·"$rc"·!=·0;·then | ||
| 220 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 221 | » false··#·end·with·an·error·code | ||
| 222 | fi | ||
| 223 | else | ||
| 224 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 225 | fi | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 211 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 231 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 212 | ··set_fact: | 232 | ··set_fact: |
| Offset 314, 41 lines modified | Offset 341, 14 lines modified | ||
| 314 | ··-·medium_disruption | 341 | ··-·medium_disruption |
| 315 | ··-·reboot_required | 342 | ··-·reboot_required |
| 316 | ··-·restrict_strategy | 343 | ··-·restrict_strategy |
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 318 | [customizations] | 345 | [customizations] |
| 319 | fips·=·true | 346 | fips·=·true |
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 321 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 322 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 323 | var_system_crypto_policy='FIPS:OSPP' | ||
| Max diff block lines reached; 861960/868791 bytes (99.21%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037dd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037de0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037de0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037df0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037df0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037e00:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037e00:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037e10:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037e10:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037e20:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037e20:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037e30:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037e30:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037e40:·2032·3032·3 | 00037e40:·2032·3032·352d·3132·2d31·3029·0a20·2020···2025-12-10).··· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037e50:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037e60:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037e60:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e70:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e70:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e80:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e80:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e90:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e90:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037ea0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037ea0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037eb0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037eb0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15209, 306 lines modified | Offset 15209, 306 lines modified | ||
| 0003b680:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b680:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b690:·2223·6964·6d38·3036·3222·2074·6162·696e··"#idm8062"·tabin | 0003b690:·2223·6964·6d38·3036·3222·2074·6162·696e··"#idm8062"·tabin | ||
| 0003b6a0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b6a0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b6b0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b6b0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b6c0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b6c0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b6d0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b6d0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b6e0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b6e0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b6f0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b700:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b710:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b720:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b730:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b740:·6d38·3036·3222·3e3c·7072·653e·3c63·6f64··m8062"><pre><cod | |||
| 0003b750:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b760:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b770:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b780:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b790:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b7a0:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b7b0:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b7c0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b7d0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b7e0:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003b7f0:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003b800:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003b810:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003b820:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003b830:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b840:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003b850:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003b860:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003b870:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003b880:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003b890:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003b8a0:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003b8b0:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003b8c0:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003b8d0:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003b8e0:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003b8f0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b900:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003b910:·2027·2922·0a0a·2020·2020·0a20·2020·2064···')"..····.····d | |||
| 0003b920:·6e66·2072·6569·6e73·7461·6c6c·202d·7920··nf·reinstall·-y· | |||
| 0003b930:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003b940:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003b950:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b960:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b970:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b980:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b990:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b9a0:·2223·6964·6d38·3036·3322·2074·6162·696e··"#idm8063"·tabin | |||
| 0003b9b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b9c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b9d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b9e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b9f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003ba00:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b | 0003ba10:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b | 0003ba20:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003ba30:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003ba40:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003ba50:·2269·646d·3830·3633·223e·3c74·6162·6c65··"idm8063"><table | ||
| 0003b | 0003ba60:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003ba70:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003ba80:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003ba90:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003baa0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003bab0:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003bac0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003bad0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003bae0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003baf0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003bb00:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003bb10:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bb20:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003bb30:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003bb40:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003bb50:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003bb60:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003bb70:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003bb80:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003bb90:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003bba0:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003bbb0:·696e·7374·616c·6c5f·636d·643a·2064·6e66··install_cmd:·dnf | ||
| 0003b | 0003bbc0:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003bbd0:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003bbe0:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003bbf0:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003bc00:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003bc10:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003bc20:·7461·6773·3a0a·2020·2d20·4343·452d·3930··tags:.··-·CCE-90 | ||
| 0003b | 0003bc30:·3834·312d·380a·2020·2d20·434a·4953·2d35··841-8.··-·CJIS-5 | ||
| 0003b | 0003bc40:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003bc50:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003bc60:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003bc70:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b | 0003bc80:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b | 0003bc90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b | 0003bca0:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b | 0003bcb0:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b | 0003bcc0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003bcd0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b | 0003bce0:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b | 0003bcf0:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b | 0003bd00:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b | 0003bd10:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b | 0003bd20:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b | 0003bd30:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b | 0003bd40:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b | 0003bd50:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b | 0003bd60:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| Max diff block lines reached; 17176793/17218799 bytes (99.76%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-10) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 110, 14 lines modified | Offset 110, 27 lines modified | ||
| 110 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 110 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 111 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 111 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 112 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 112 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 113 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 113 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 119 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 120 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 121 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 122 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 123 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 124 | fi | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 122 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 130 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 123 | ··set_fact: | 131 | ··set_fact: |
| Offset 249, 27 lines modified | Offset 262, 14 lines modified | ||
| 249 | ··-·PCI-DSSv4-11.5.2 | 262 | ··-·PCI-DSSv4-11.5.2 |
| 250 | ··-·high_complexity | 263 | ··-·high_complexity |
| 251 | ··-·high_severity | 264 | ··-·high_severity |
| 252 | ··-·medium_disruption | 265 | ··-·medium_disruption |
| 253 | ··-·no_reboot_needed | 266 | ··-·no_reboot_needed |
| 254 | ··-·restrict_strategy | 267 | ··-·restrict_strategy |
| 255 | ··-·rpm_verify_hashes | 268 | ··-·rpm_verify_hashes |
| 256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 257 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 258 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 259 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 260 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 261 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 262 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 263 | fi | ||
| 264 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 269 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 265 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 270 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 266 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 271 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 267 | run·the·following·command·to·determine·which·package·owns·it: | 272 | run·the·following·command·to·determine·which·package·owns·it: |
| 268 | $·rpm·-qf·FILENAME | 273 | $·rpm·-qf·FILENAME |
| 269 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 274 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 270 | $·sudo·rpm·--setugids·PACKAGENAME | 275 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 289, 14 lines modified | Offset 289, 40 lines modified | ||
| 289 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 289 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 290 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 290 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 291 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 291 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 292 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 292 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 293 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 293 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 294 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 294 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 295 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 295 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 298 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 299 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 300 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 301 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 302 | declare·-A·SETPERMS_RPM_DICT | ||
| 303 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 304 | #·is·expected·by·the·RPM·database | ||
| 305 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 306 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 307 | do | ||
| 308 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 309 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 310 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 311 | done | ||
| 312 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 313 | #·correct·values | ||
| 314 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 315 | do | ||
| 316 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 317 | done | ||
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 297 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 319 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 298 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 320 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 299 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 321 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 300 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 322 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 301 | -·name:·Read·list·of·files·with·incorrect·ownership | 323 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 302 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 324 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 374, 40 lines modified | Offset 400, 14 lines modified | ||
| 374 | ··-·PCI-DSSv4-11.5.2 | 400 | ··-·PCI-DSSv4-11.5.2 |
| 375 | ··-·high_complexity | 401 | ··-·high_complexity |
| 376 | ··-·high_severity | 402 | ··-·high_severity |
| 377 | ··-·medium_disruption | 403 | ··-·medium_disruption |
| 378 | ··-·no_reboot_needed | 404 | ··-·no_reboot_needed |
| 379 | ··-·restrict_strategy | 405 | ··-·restrict_strategy |
| 380 | ··-·rpm_verify_ownership | 406 | ··-·rpm_verify_ownership |
| 381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 382 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 383 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 384 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 385 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 386 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1651067/1658863 bytes (99.53%) of diff not shown. | |||
| Offset 14311, 15 lines modified | Offset 14311, 15 lines modified | ||
| 00037e60:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037e60:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037e70:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037e70:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037e80:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037e80:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037e90:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037e90:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037ea0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037ea0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037eb0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037eb0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037ed0:·7320·6f66·2032·3032·3 | 00037ed0:·7320·6f66·2032·3032·352d·3132·2d31·3029··s·of·2025-12-10) | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037ef0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f00:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f00:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037f10:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037f10:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037f20:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037f20:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037f30:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037f30:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037f40:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037f40:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15153, 237 lines modified | Offset 15153, 237 lines modified | ||
| 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b310:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | 0003b310:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | ||
| 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b370:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b370:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003b380:· | 0003b380:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | ||
| 0003b390:· | 0003b390:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b3a0:· | 0003b3a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b3b0:· | 0003b3b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b3c0:· | 0003b3c0:·2269·646d·3834·3036·223e·3c74·6162·6c65··"idm8406"><table | ||
| 0003b3d0:· | 0003b3d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b3e0:· | 0003b3e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b3f0:·6 | 0003b3f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b400:· | 0003b400:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b410:· | 0003b410:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b420:· | 0003b420:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b430:· | 0003b430:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b440:· | 0003b440:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b450:· | 0003b450:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b460:· | 0003b460:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b470:· | 0003b470:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b480:· | 0003b480:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b490:· | 0003b490:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b4a0:· | 0003b4a0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003b4b0:· | 0003b4b0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b4c0:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 0003b4d0:·6464·3d61·6964·650a·3c2f·636f·6465·3e3c··dd=aide.</code>< | |||
| 0003b4e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b4f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b500:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b510:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b520:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b530:·3037·2220·7461·6269·6e64·6578·3d22·3022··07"·tabindex="0" | |||
| 0003b540:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b550:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b560:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b570:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b580:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b590:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b5a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b5b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b5c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b5d0:·7073·6522·2069·643d·2269·646d·3834·3037··pse"·id="idm8407 | |||
| 0003b5e0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b5f0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b600:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b610:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b620:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b630:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b640:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b | 0003b4c0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | ||
| 0003b4d0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b4e0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b4f0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b500:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b510:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b520:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003b530:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b540:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b550:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b560:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b570:·6172·6765·743d·2223·6964·6d38·3430·3722··arget="#idm8407" | |||
| 0003b580:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b590:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b5a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b5b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b5c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b5d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b5e0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b5f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b600:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b610:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b620:·6964·3d22·6964·6d38·3430·3722·3e3c·7461··id="idm8407"><ta | |||
| 0003b630:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b640:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b650:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b660:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b670:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b6 | 0003b680:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b6 | 0003b690:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b680:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b690:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b6a0:· | 0003b6a0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003b6b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b6 | 0003b6d0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b6c0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b6d0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b6e0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b6f0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b700:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b710:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b720:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b | 0003b6e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b6f0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b700:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b710:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b720:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003b730:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003b740:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003b750:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | |||
| 0003b760:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | |||
| 0003b770:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | |||
| 0003b780:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | |||
| 0003b790:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0003b7a0:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003b7b0:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003b7c0:·656e·0a20·2020·2064·6e66·2069·6e73·7461··en.····dnf·insta | |||
| Max diff block lines reached; 32291118/32323602 bytes (99.90%) of diff not shown. | |||
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037fe0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037ff0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037ff0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038000:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038000:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038010:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038010:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038020:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038020:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038030:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038030:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038040:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038040:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038050:·2032·3032·3 | 00038050:·2032·3032·352d·3132·2d31·3029·0a20·2020···2025-12-10).··· | ||
| 00038060:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00038060:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00038070:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00038070:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038080:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038080:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038090:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038090:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000380a0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000380a0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000380b0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000380b0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000380c0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 000380c0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15172, 236 lines modified | Offset 15172, 236 lines modified | ||
| 0003b430:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003b430:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003b440:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | 0003b440:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | ||
| 0003b450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4a0:·6961·7469·6f6e·20 | 0003b4a0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | ||
| 0003b4b0:· | 0003b4b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b4c0:· | 0003b4c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b4d0:·6 | 0003b4d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b4e0:·6 | 0003b4e0:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | ||
| 0003b4f0:·3 | 0003b4f0:·3622·3e3c·7461·626c·6520·636c·6173·733d··6"><table·class= | ||
| 0003b500:· | 0003b500:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b510:· | 0003b510:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b520:· | 0003b520:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b530:· | 0003b530:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b540:· | 0003b540:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b550:· | 0003b550:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b560:· | 0003b560:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b570:· | 0003b570:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b580:· | 0003b580:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b590:· | 0003b590:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b5a0:· | 0003b5a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b5b0:· | 0003b5b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b5c0:· | 0003b5c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003b5d0:· | 0003b5d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b5e0:· | 0003b5e0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | ||
| 0003b5f0:·636b·6167·6520·2d2d·6164·643d·6169·6465··ckage·--add=aide | |||
| 0003b600:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b610:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b620:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b630:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b640:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b650:·743d·2223·6964·6d38·3430·3722·2074·6162··t="#idm8407"·tab | |||
| 0003b660:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b670:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b680:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b690:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b6a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b6b0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b6c0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b6d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b | 0003b5f0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | ||
| 0003b600:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b610:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b620:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b630:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b640:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b650:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b660:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b670:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b680:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b690:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b6a0:·2369·646d·3834·3037·2220·7461·6269·6e64··#idm8407"·tabind | |||
| 0003b6b0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b6c0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b6d0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b6e0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b6f0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b700:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b710:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b720:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b | 0003b730:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b740:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b750:·3834·3037·223e·3c74·6162·6c65·2063·6c61··8407"><table·cla | |||
| 0003b760:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b770:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b780:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b790:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b7a0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b700:·3d22·6964·6d38·3430·3722·3e3c·7461·626c··="idm8407"><tabl | |||
| 0003b710:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b720:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b730:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b740:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b750:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b760:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b770:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b780:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b7 | 0003b7b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b7a0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b7 | 0003b7c0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b7d0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b7 | 0003b7e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b7d0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b7e0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b7f0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b800:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b810:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b820:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b830:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b840:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b850:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b | 0003b7f0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b800:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b810:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b820:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b830:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b840:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b850:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b860:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b870:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b880:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003b890:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003b8a0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003b8b0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003b8c0:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003b8d0:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003b8e0:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003b8f0:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| Max diff block lines reached; 32151521/32183867 bytes (99.90%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037dc0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037dd0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037dd0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037de0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037de0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037df0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037df0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037e00:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037e00:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037e10:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037e10:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e20:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e20:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e30:·6620·3230·323 | 00037e30:·6620·3230·3235·2d31·322d·3131·290a·2020··f·2025-12-11).·· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e40:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e50:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e50:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e60:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e60:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e70:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e70:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e80:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e80:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e90:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e90:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037ea0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037ea0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15127, 301 lines modified | Offset 15127, 301 lines modified | ||
| 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b170:·2223·6964·6d31·3538·3422·2074·6162·696e··"#idm1584"·tabin | 0003b170:·2223·6964·6d31·3538·3422·2074·6162·696e··"#idm1584"·tabin | ||
| 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b1d0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b1e0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b1f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b200:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b210:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b220:·6d31·3538·3422·3e3c·7072·653e·3c63·6f64··m1584"><pre><cod | |||
| 0003b230:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b240:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b250:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b260:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b270:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b280:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b290:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b2a0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b2b0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b2c0:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003b2d0:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003b2e0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003b2f0:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003b300:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003b310:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b320:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003b330:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003b340:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003b350:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003b360:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003b370:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003b380:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003b390:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003b3a0:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003b3b0:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003b3c0:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003b3d0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b3e0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003b3f0:·2027·2922·0a0a·2020·2020·0a20·2020·2079···')"..····.····y | |||
| 0003b400:·756d·2072·6569·6e73·7461·6c6c·202d·7920··um·reinstall·-y· | |||
| 0003b410:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003b420:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003b430:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b440:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b450:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b460:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b470:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b480:·2223·6964·6d31·3538·3522·2074·6162·696e··"#idm1585"·tabin | |||
| 0003b490:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b4a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b4b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b4c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b4d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003b4e0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b | 0003b4f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b | 0003b500:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003b510:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003b520:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003b530:·2269·646d·3135·3835·223e·3c74·6162·6c65··"idm1585"><table | ||
| 0003b | 0003b540:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b550:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b560:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b570:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b580:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b590:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003b5a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b5b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b5c0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003b5d0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b5e0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b5f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b600:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b610:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003b620:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003b630:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003b640:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003b650:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003b660:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003b670:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003b680:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003b690:·696e·7374·616c·6c5f·636d·643a·2079·756d··install_cmd:·yum | ||
| 0003b | 0003b6a0:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003b6b0:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003b6c0:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003b6d0:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003b6e0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003b6f0:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003b700:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b | 0003b710:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003b720:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003b730:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003b740:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b | 0003b750:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b | 0003b760:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b | 0003b770:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b | 0003b780:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b | 0003b790:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003b7a0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b | 0003b7b0:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b | 0003b7c0:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b | 0003b7d0:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b | 0003b7e0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b | 0003b7f0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b | 0003b800:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b | 0003b810:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b | 0003b820:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b | 0003b830:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003b | 0003b840:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| Max diff block lines reached; 13938220/13963804 bytes (99.82%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | ··············(RHVH) | 39 | ··············(RHVH) |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 42 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 43 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 43 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 53 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 97, 14 lines modified | Offset 97, 27 lines modified | ||
| 97 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 97 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 106 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 107 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 108 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 109 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 110 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 111 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 117 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 110 | ··set_fact: | 118 | ··set_fact: |
| Offset 231, 27 lines modified | Offset 244, 14 lines modified | ||
| 231 | ··-·PCI-DSSv4-11.5.2 | 244 | ··-·PCI-DSSv4-11.5.2 |
| 232 | ··-·high_complexity | 245 | ··-·high_complexity |
| 233 | ··-·high_severity | 246 | ··-·high_severity |
| 234 | ··-·medium_disruption | 247 | ··-·medium_disruption |
| 235 | ··-·no_reboot_needed | 248 | ··-·no_reboot_needed |
| 236 | ··-·restrict_strategy | 249 | ··-·restrict_strategy |
| 237 | ··-·rpm_verify_hashes | 250 | ··-·rpm_verify_hashes |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 240 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 241 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 242 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 243 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 244 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 245 | fi | ||
| 246 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 251 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 247 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 252 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 248 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 253 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 249 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 254 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 250 | $·rpm·-qf·FILENAME | 255 | $·rpm·-qf·FILENAME |
| 251 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 256 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 272, 14 lines modified | Offset 272, 44 lines modified | ||
| 272 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 272 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 273 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 273 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 274 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 274 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 275 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 275 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 276 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 276 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 277 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 277 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 280 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 281 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 282 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 283 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 284 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 285 | declare·-A·SETPERMS_RPM_DICT | ||
| 286 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 287 | #·is·expected·by·the·RPM·database | ||
| 288 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 289 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 290 | do | ||
| 291 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 292 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 293 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 294 | ········do | ||
| 295 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 296 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 297 | ········done | ||
| 298 | done | ||
| 299 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 300 | #·correct·values | ||
| 301 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 302 | do | ||
| 303 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 304 | done | ||
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 280 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 306 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 281 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 307 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 282 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 308 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 283 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 309 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 284 | -·name:·Read·list·of·files·with·incorrect·permissions | 310 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 285 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 311 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 357, 44 lines modified | Offset 387, 14 lines modified | ||
| 357 | ··-·PCI-DSSv4-11.5.2 | 387 | ··-·PCI-DSSv4-11.5.2 |
| 358 | ··-·high_complexity | 388 | ··-·high_complexity |
| 359 | ··-·high_severity | 389 | ··-·high_severity |
| 360 | ··-·medium_disruption | 390 | ··-·medium_disruption |
| 361 | ··-·no_reboot_needed | 391 | ··-·no_reboot_needed |
| 362 | ··-·restrict_strategy | 392 | ··-·restrict_strategy |
| 363 | ··-·rpm_verify_permissions | 393 | ··-·rpm_verify_permissions |
| 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1023798/1031954 bytes (99.21%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037e50:·313 | 00037e50:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15180, 301 lines modified | Offset 15180, 301 lines modified | ||
| 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b4c0:·646d·3135·3834·2220·7461·6269·6e64·6578··dm1584"·tabindex | 0003b4c0:·646d·3135·3834·2220·7461·6269·6e64·6578··dm1584"·tabindex | ||
| 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b520:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b530:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b540:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b550:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b560:·6c61·7073·6522·2069·643d·2269·646d·3135··lapse"·id="idm15 | |||
| 0003b570:·3834·223e·3c70·7265·3e3c·636f·6465·3e0a··84"><pre><code>. | |||
| 0003b580:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | |||
| 0003b590:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | |||
| 0003b5a0:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | |||
| 0003b5b0:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | |||
| 0003b5c0:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | |||
| 0003b5d0:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | |||
| 0003b5e0:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | |||
| 0003b5f0:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | |||
| 0003b600:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003b610:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | |||
| 0003b620:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | |||
| 0003b630:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | |||
| 0003b640:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | |||
| 0003b650:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | |||
| 0003b660:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b670:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | |||
| 0003b680:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | |||
| 0003b690:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | |||
| 0003b6a0:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | |||
| 0003b6b0:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | |||
| 0003b6c0:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | |||
| 0003b6d0:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | |||
| 0003b6e0:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | |||
| 0003b6f0:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | |||
| 0003b700:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | |||
| 0003b710:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | |||
| 0003b720:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003b730:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | |||
| 0003b740:·220a·0a20·2020·200a·2020·2020·7975·6d20··"..····.····yum· | |||
| 0003b750:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | |||
| 0003b760:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | |||
| 0003b770:·616c·6c0a·2020·2020·0a66·690a·3c2f·636f··all.····.fi.</co | |||
| 0003b780:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b790:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b7a0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b7b0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b7c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b7d0:·646d·3135·3835·2220·7461·6269·6e64·6578··dm1585"·tabindex | |||
| 0003b7e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b7f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b800:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b810:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b820:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b | 0003b830:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b | 0003b840:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b | 0003b850:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b860:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b870:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003b880:·6d31·3538·3522·3e3c·7461·626c·6520·636c··m1585"><table·cl | ||
| 0003b | 0003b890:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003b8a0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003b8b0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003b8c0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003b8d0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003b8e0:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b | 0003b8f0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003b900:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b | 0003b910:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b | 0003b920:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003b930:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b | 0003b940:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003b950:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b | 0003b960:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b | 0003b970:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b | 0003b980:·636f·6465·3e2d·206e·616d·653a·2027·5365··code>-·name:·'Se | ||
| 0003b | 0003b990:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003b | 0003b9a0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003b | 0003b9b0:·6c20·636f·6d6d·616e·6427·0a20·2073·6574··l·command'.··set | ||
| 0003b | 0003b9c0:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003b | 0003b9d0:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003b | 0003b9e0:·7461·6c6c·5f63·6d64·3a20·7975·6d20·7265··tall_cmd:·yum·re | ||
| 0003b | 0003b9f0:·696e·7374·616c·6c20·2d79·0a20·2077·6865··install·-y.··whe | ||
| 0003b | 0003ba00:·6e3a·2061·6e73·6962·6c65·5f64·6973·7472··n:·ansible_distr | ||
| 0003b | 0003ba10:·6962·7574·696f·6e20·696e·205b·2022·4665··ibution·in·[·"Fe | ||
| 0003b | 0003ba20:·646f·7261·222c·2022·5265·6448·6174·222c··dora",·"RedHat", | ||
| 0003b | 0003ba30:·2022·4365·6e74·4f53·222c·2022·4f72·6163···"CentOS",·"Orac | ||
| 0003b | 0003ba40:·6c65·4c69·6e75·7822·205d·0a20·2074·6167··leLinux"·].··tag | ||
| 0003b | 0003ba50:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003b750:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | |||
| 0003b760:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | |||
| 0003b770:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | |||
| 0003b780:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | |||
| 0003b790:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003b7a0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b7b0:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | |||
| 0003b7c0:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | |||
| 0003b7d0:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | |||
| 0003b7e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b7f0:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | |||
| 0003b800:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | |||
| 0003b810:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b820:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b830:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | |||
| 0003b840:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | |||
| 0003b850:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| 0003b860:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | |||
| 0003b870:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | |||
| Max diff block lines reached; 24229669/24271123 bytes (99.83%) of diff not shown. | |||
| Offset 14383, 16 lines modified | Offset 14383, 16 lines modified | ||
| 000382e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000382e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000382f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000382f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00038300:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00038300:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038310:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038310:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038320:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038320:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038330:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038330:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038340:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038340:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038350:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038350:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00038360:·313 | 00038360:·3132·2d31·3129·0a20·2020·2020·2020·2020··12-11).········· | ||
| 00038370:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038370:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038380:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038380:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038390:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038390:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 000383a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 000383a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000383b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000383b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000383c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000383c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000383d0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000383d0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15203, 301 lines modified | Offset 15203, 301 lines modified | ||
| 0003b620:·7461·7267·6574·3d22·2369·646d·3135·3834··target="#idm1584 | 0003b620:·7461·7267·6574·3d22·2369·646d·3135·3834··target="#idm1584 | ||
| 0003b630:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b630:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b640:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b640:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b650:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b650:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b660:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b660:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b670:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b670:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b680:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b680:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b690:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b6a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b6b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b6c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b6d0:·2069·643d·2269·646d·3135·3834·223e·3c70···id="idm1584"><p | |||
| 0003b6e0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003b6f0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003b700:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003b710:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003b720:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003b730:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003b740:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003b750:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003b760:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003b690:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b6a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b6b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b6c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b6d0:·7365·2220·6964·3d22·6964·6d31·3538·3422··se"·id="idm1584" | |||
| 0003b6e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b6f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b700:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b710:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b720:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b730:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | |||
| 0003b740:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | |||
| 0003b750:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b760:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0003b770:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b780:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b790:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b7a0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b7b0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | |||
| 0003b7c0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | |||
| 0003b7d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b7e0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | |||
| 0003b7f0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | |||
| 0003b800:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | |||
| 0003b810:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | |||
| 0003b820:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | |||
| 0003b830:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | |||
| 0003b840:·6d64·3a20·7975·6d20·7265·696e·7374·616c··md:·yum·reinstal | |||
| 0003b850:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | |||
| 0003b860:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | |||
| 0003b870:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | |||
| 0003b880:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | |||
| 0003b890:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | |||
| 0003b8a0:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | |||
| 0003b8b0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | |||
| 0003b8c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003b8d0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | |||
| 0003b8e0:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | |||
| 0003b8f0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | |||
| 0003b900:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | |||
| 0003b910:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | |||
| 0003b920:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b930:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | |||
| 0003b940:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | |||
| 0003b950:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | |||
| 0003b960:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b970:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | |||
| 0003b980:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b990:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b9a0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | |||
| 0003b9b0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | |||
| 0003b9c0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | |||
| 0003b9d0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | |||
| 0003b9e0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b9f0:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | |||
| 0003ba00:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | |||
| 0003ba10:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | |||
| 0003ba20:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | |||
| 0003ba30:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | |||
| 0003ba40:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | |||
| 0003ba50:·6f6d·6d61·6e64·2028·7a79·7070·6572·2927··ommand·(zypper)' | |||
| 0003ba60:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | |||
| 0003ba70:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | |||
| 0003ba80:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | |||
| 0003ba90:·7a79·7070·6572·2069·6e20·2d66·202d·790a··zypper·in·-f·-y. | |||
| 0003baa0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003bab0:·6469·7374·7269·6275·7469·6f6e·203d·3d20··distribution·==· | |||
| 0003bac0:·2253·4c45·5322·0a20·2074·6167·733a·0a20··"SLES".··tags:.· | |||
| 0003bad0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | |||
| 0003bae0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | |||
| 0003baf0:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | |||
| 0003bb00:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | |||
| 0003bb10:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | |||
| 0003bb20:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | |||
| 0003bb30:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | |||
| 0003bb40:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003bb50:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | |||
| 0003bb60:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | |||
| 0003bb70:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003bb80:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | |||
| 0003bb90:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | |||
| 0003bba0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bbb0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003bbc0:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | |||
| 0003bbd0:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | |||
| 0003bbe0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | |||
| 0003bbf0:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | |||
| 0003bc00:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | |||
| 0003bc10:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | |||
| Max diff block lines reached; 15985756/16011616 bytes (99.84%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | ··············Virtualization·Host·(RHVH) | 59 | ··············Virtualization·Host·(RHVH) |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-vpp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-vpp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 62 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 63 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 63 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 116, 14 lines modified | Offset 116, 27 lines modified | ||
| 116 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 116 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 117 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 117 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 125 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 126 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 127 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 128 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 129 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 130 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 128 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 136 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 129 | ··set_fact: | 137 | ··set_fact: |
| Offset 250, 27 lines modified | Offset 263, 14 lines modified | ||
| 250 | ··-·PCI-DSSv4-11.5.2 | 263 | ··-·PCI-DSSv4-11.5.2 |
| 251 | ··-·high_complexity | 264 | ··-·high_complexity |
| 252 | ··-·high_severity | 265 | ··-·high_severity |
| 253 | ··-·medium_disruption | 266 | ··-·medium_disruption |
| 254 | ··-·no_reboot_needed | 267 | ··-·no_reboot_needed |
| 255 | ··-·restrict_strategy | 268 | ··-·restrict_strategy |
| 256 | ··-·rpm_verify_hashes | 269 | ··-·rpm_verify_hashes |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 258 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 259 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 260 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 261 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 262 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 263 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 264 | fi | ||
| 265 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 266 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 271 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 267 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 272 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 268 | run·the·following·command·to·determine·which·package·owns·it: | 273 | run·the·following·command·to·determine·which·package·owns·it: |
| 269 | $·rpm·-qf·FILENAME | 274 | $·rpm·-qf·FILENAME |
| 270 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 271 | $·sudo·rpm·--setugids·PACKAGENAME | 276 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 289, 14 lines modified | Offset 289, 40 lines modified | ||
| 289 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 289 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 290 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 290 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 294 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 294 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 298 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 299 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 300 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 301 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 302 | declare·-A·SETPERMS_RPM_DICT | ||
| 303 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 304 | #·is·expected·by·the·RPM·database | ||
| 305 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 306 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 307 | do | ||
| 308 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 309 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 310 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 311 | done | ||
| 312 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 313 | #·correct·values | ||
| 314 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 315 | do | ||
| 316 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 317 | done | ||
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 297 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 319 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 298 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 320 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 299 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 321 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 300 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 322 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 301 | -·name:·Read·list·of·files·with·incorrect·ownership | 323 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 302 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 324 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 371, 40 lines modified | Offset 397, 14 lines modified | ||
| 371 | ··-·PCI-DSSv4-11.5.2 | 397 | ··-·PCI-DSSv4-11.5.2 |
| 372 | ··-·high_complexity | 398 | ··-·high_complexity |
| 373 | ··-·high_severity | 399 | ··-·high_severity |
| 374 | ··-·medium_disruption | 400 | ··-·medium_disruption |
| 375 | ··-·no_reboot_needed | 401 | ··-·no_reboot_needed |
| 376 | ··-·restrict_strategy | 402 | ··-·restrict_strategy |
| 377 | ··-·rpm_verify_ownership | 403 | ··-·rpm_verify_ownership |
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 383 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1111367/1119234 bytes (99.30%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380d0:·7320·6f66·2032·3032·3 | 000380d0:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15172, 129 lines modified | Offset 15172, 129 lines modified | ||
| 0003b430:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b430:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b440:·6d35·3339·3022·2074·6162·696e·6465·783d··m5390"·tabindex= | 0003b440:·6d35·3339·3022·2074·6162·696e·6465·783d··m5390"·tabindex= | ||
| 0003b450:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b450:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b460:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b460:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b470:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b470:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b480:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b480:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b490:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b490:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b4a0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b4b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b4c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b4d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b4e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b4f0:·3533·3930·223e·3c74·6162·6c65·2063·6c61··5390"><table·cla | |||
| 0003b500:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b510:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b520:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b530:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b540:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b550:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b560:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b570:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b580:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b590:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b5a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b5b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b5c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b5d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b5e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b5f0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b600:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b610:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b620:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b630:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b640:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b650:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b660:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b670:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b680:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b690:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b6a0:·3a0a·2020·2d20·4343·452d·3833·3036·372d··:.··-·CCE-83067- | |||
| 0003b6b0:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b6c0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b6d0:·472d·534c·4553·2d31·322d·3031·3034·3939··G-SLES-12-010499 | |||
| 0003b6e0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b6f0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b700:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b710:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b720:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b730:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b740:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b750:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b760:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b770:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b780:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b790:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b7a0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b7b0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b7c0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b7d0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b7e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b7f0:·743d·2223·6964·6d35·3339·3122·2074·6162··t="#idm5391"·tab | |||
| 0003b800:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b810:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b820:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b830:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b840:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b850:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b860:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b870:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b880:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b890:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b8a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b8b0:·3533·3931·223e·3c70·7265·3e3c·636f·6465··5391"><pre><code | |||
| 0003b8c0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b8d0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b8e0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b8f0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b900:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b910:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b920:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b930:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b940:·6d35·3339·3222·2074·6162·696e·6465·783d··m5392"·tabindex= | |||
| 0003b950:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b960:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b970:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b980:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b990:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003b4a0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b | 0003b4b0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b | 0003b4c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003b4d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003b4e0:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | ||
| 0003b | 0003b4f0:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | ||
| 0003b | 0003b500:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b | 0003b510:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b | 0003b520:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b | 0003b530:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b | 0003b540:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b | 0003b550:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b | 0003b560:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b | 0003b570:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b580:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b | 0003b590:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b | 0003b5a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b | 0003b5b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b | 0003b5c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003b | 0003b5d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b | 0003b5e0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003b | 0003b5f0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003b | 0003b600:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 0003b | 0003b610:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| Max diff block lines reached; 19895173/19912753 bytes (99.91%) of diff not shown. | |||
| Offset 14342, 15 lines modified | Offset 14342, 15 lines modified | ||
| 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380c0:·7320·6f66·2032·3032·3 | 000380c0:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15177, 130 lines modified | Offset 15177, 130 lines modified | ||
| 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b490:·2369·646d·3533·3930·2220·7461·6269·6e64··#idm5390"·tabind | 0003b490:·2369·646d·3533·3930·2220·7461·6269·6e64··#idm5390"·tabind | ||
| 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4f0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b500:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b510:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b520:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b530:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b540:·6964·6d35·3339·3022·3e3c·7461·626c·6520··idm5390"><table· | |||
| 0003b550:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b560:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b570:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b580:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b590:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b5a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b5c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b5d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b5e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b5f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b600:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b610:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b620:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b630:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b640:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b650:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b660:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b670:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b680:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b690:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b6a0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b6b0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b6c0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b6d0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b6e0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b6f0:·6167·733a·0a20·202d·2043·4345·2d38·3330··ags:.··-·CCE-830 | |||
| 0003b700:·3637·2d39·0a20·202d·2043·4a49·532d·352e··67-9.··-·CJIS-5. | |||
| 0003b710:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b720:·5354·4947·2d53·4c45·532d·3132·2d30·3130··STIG-SLES-12-010 | |||
| 0003b730:·3439·390a·2020·2d20·4e49·5354·2d38·3030··499.··-·NIST-800 | |||
| 0003b740:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b750:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b760:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b770:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b780:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b790:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b7a0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b7b0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b7c0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b7d0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b7e0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b7f0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b800:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b810:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b820:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b830:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b840:·7267·6574·3d22·2369·646d·3533·3931·2220··rget="#idm5391"· | |||
| 0003b850:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b860:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b870:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b880:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b890:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b8a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b8b0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b8c0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b8d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b8e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b8f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b900:·6964·6d35·3339·3122·3e3c·7072·653e·3c63··idm5391"><pre><c | |||
| 0003b910:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b920:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b930:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b940:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b950:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b960:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b970:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b980:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b990:·2369·646d·3533·3932·2220·7461·6269·6e64··#idm5392"·tabind | |||
| 0003b9a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b9b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b9c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b9d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b9e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b | 0003b4f0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b | 0003b500:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003b | 0003b510:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003b520:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003b530:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003b540:·3533·3930·223e·3c74·6162·6c65·2063·6c61··5390"><table·cla | ||
| 0003b | 0003b550:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003b560:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003b570:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003b580:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003b590:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003b5a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003b5b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b | 0003b5c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b5d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b5e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b | 0003b5f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b | 0003b600:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b | 0003b610:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003b | 0003b620:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003b | 0003b630:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 0003b | 0003b640:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003b | 0003b650:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003b | 0003b660:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| Max diff block lines reached; 20100367/20118085 bytes (99.91%) of diff not shown. | |||
| Offset 14344, 15 lines modified | Offset 14344, 15 lines modified | ||
| 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380e0:·7320·6f66·2032·3032·3 | 000380e0:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15163, 129 lines modified | Offset 15163, 129 lines modified | ||
| 0003b3a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b3a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b3b0:·646d·3533·3930·2220·7461·6269·6e64·6578··dm5390"·tabindex | 0003b3b0:·646d·3533·3930·2220·7461·6269·6e64·6578··dm5390"·tabindex | ||
| 0003b3c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b3c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b3d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b3d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b3e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b3e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b3f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b3f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b400:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b400:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b410:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b420:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b430:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b440:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b450:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b460:·6d35·3339·3022·3e3c·7461·626c·6520·636c··m5390"><table·cl | |||
| 0003b470:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b480:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b490:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b4a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b4b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b4c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b4d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b4e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b4f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b500:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b510:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b520:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b530:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b540:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b550:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b560:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b570:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b580:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b590:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b5a0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b5b0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b5c0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b5d0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b5e0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b5f0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b600:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b610:·733a·0a20·202d·2043·4345·2d38·3330·3637··s:.··-·CCE-83067 | |||
| 0003b620:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b630:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b640:·4947·2d53·4c45·532d·3132·2d30·3130·3439··IG-SLES-12-01049 | |||
| 0003b650:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b660:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b670:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b680:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b690:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b6a0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b6b0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b6c0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b6d0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b6e0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b6f0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b700:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b710:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b720:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b730:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b740:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b750:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b760:·6574·3d22·2369·646d·3533·3931·2220·7461··et="#idm5391"·ta | |||
| 0003b770:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b780:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b790:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b7a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b7b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b7c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b7d0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b7e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b7f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b800:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b810:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b820:·6d35·3339·3122·3e3c·7072·653e·3c63·6f64··m5391"><pre><cod | |||
| 0003b830:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b840:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b850:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b860:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b870:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b880:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b890:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b8b0:·646d·3533·3932·2220·7461·6269·6e64·6578··dm5392"·tabindex | |||
| 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b | 0003b410:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 0003b | 0003b420:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003b | 0003b430:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b | 0003b440:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b | 0003b450:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | ||
| 0003b | 0003b460:·3930·223e·3c74·6162·6c65·2063·6c61·7373··90"><table·class | ||
| 0003b | 0003b470:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b | 0003b480:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b | 0003b490:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b | 0003b4a0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b | 0003b4b0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b | 0003b4c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b | 0003b4d0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b | 0003b4e0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003b4f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b500:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b | 0003b510:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b | 0003b520:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b | 0003b530:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003b | 0003b540:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b | 0003b550:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003b | 0003b560:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003b | 0003b570:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003b | 0003b580:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| Max diff block lines reached; 7704744/7722324 bytes (99.77%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 134, 14 lines modified | Offset 134, 27 lines modified | ||
| 134 | include·install_aide | 134 | include·install_aide |
| 135 | class·install_aide·{ | 135 | class·install_aide·{ |
| 136 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 137 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 138 | ··} | 138 | ··} |
| 139 | } | 139 | } |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 147 | zypper·install·-y·"aide" | ||
| 148 | else | ||
| 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 150 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Ensure·aide·is·installed | 156 | -·name:·Ensure·aide·is·installed |
| 146 | ··package: | 157 | ··package: |
| Offset 162, 27 lines modified | Offset 175, 14 lines modified | ||
| 162 | ··-·no_reboot_needed | 175 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 176 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | [[packages]] | 178 | [[packages]] |
| 166 | name·=·"aide" | 179 | name·=·"aide" |
| 167 | version·=·"*" | 180 | version·=·"*" |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 175 | zypper·install·-y·"aide" | ||
| 176 | else | ||
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 178 | fi | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/bin/aide·--init | 183 | $·sudo·/usr/bin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 29 lines modified | ||
| 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 212 | ·············_\x8c_\x8i_\x8s············1.4.1 | 212 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 219 | zypper·-q·--no-remote·ref | ||
| 220 | zypper·install·-y·"aide" | ||
| 221 | /usr/bin/aide·--init | ||
| 222 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 223 | else | ||
| 224 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 225 | fi | ||
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 217 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 218 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 219 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 220 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 221 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated | 231 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated |
| 222 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref | 232 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref |
| Offset 312, 29 lines modified | Offset 327, 14 lines modified | ||
| 312 | ··-·PCI-DSSv4-11.5.2 | 327 | ··-·PCI-DSSv4-11.5.2 |
| 313 | ··-·aide_build_database | 328 | ··-·aide_build_database |
| 314 | ··-·low_complexity | 329 | ··-·low_complexity |
| 315 | ··-·low_disruption | 330 | ··-·low_disruption |
| 316 | ··-·medium_severity | 331 | ··-·medium_severity |
| 317 | ··-·no_reboot_needed | 332 | ··-·no_reboot_needed |
| 318 | ··-·restrict_strategy | 333 | ··-·restrict_strategy |
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 320 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 321 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 322 | zypper·-q·--no-remote·ref | ||
| 323 | zypper·install·-y·"aide" | ||
| 324 | /usr/bin/aide·--init | ||
| 325 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 326 | else | ||
| 327 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 328 | fi | ||
| 329 | Group ·Disk·Partitioning· Group·contains·9·rules | 334 | Group ·Disk·Partitioning· Group·contains·9·rules |
| 330 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which | 335 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which |
| 331 | should·be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default | 336 | should·be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default |
| Max diff block lines reached; 908440/913879 bytes (99.40%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 000380d0:·2032·3032·3 | 000380d0:·2032·3032·352d·3132·2d31·3129·0a20·2020···2025-12-11).··· | ||
| 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14833, 106 lines modified | Offset 14833, 106 lines modified | ||
| 00039f00:·2d74·6172·6765·743d·2223·6964·6d38·3133··-target="#idm813 | 00039f00:·2d74·6172·6765·743d·2223·6964·6d38·3133··-target="#idm813 | ||
| 00039f10:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 00039f10:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 00039f20:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00039f20:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039f30:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00039f30:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039f40:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00039f40:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039f50:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00039f50:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039f60:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00039f60:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039f70:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 00039f80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039f90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039fa0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039fb0:·2220·6964·3d22·6964·6d38·3133·3122·3e3c··"·id="idm8131">< | |||
| 00039fc0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00039fd0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00039fe0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00039ff0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003a000:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00039f70:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00039f80:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00039f90:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039fa0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039fb0:·7073·6522·2069·643d·2269·646d·3831·3331··pse"·id="idm8131 | |||
| 00039fc0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039fd0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039fe0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039ff0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003a000:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003a010:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003a020:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003a030:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003a0 | 0003a010:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003a0 | 0003a020:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003a030:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003a040:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a050:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003a060:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003a070:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a080:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003a090:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003a0a0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003a0b0:·3e3c·636f·6465·3e0a·7a79·7070·6572·2069··><code>.zypper·i | |||
| 0003a0c0:·6e73·7461·6c6c·202d·7920·2264·6e66·2d61··nstall·-y·"dnf-a | |||
| 0003a0d0:·7574·6f6d·6174·6963·220a·3c2f·636f·6465··utomatic".</code | |||
| 0003a0e0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003a0f0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003a100:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003a110:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003a120:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003a130:·3831·3332·2220·7461·6269·6e64·6578·3d22··8132"·tabindex=" | |||
| 0003a140:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003a150:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003a160:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003a170:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003a180:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003a190:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003a1a0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003a1b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a1c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a1d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003a1e0:·3133·3222·3e3c·7461·626c·6520·636c·6173··132"><table·clas | |||
| 0003a1f0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003a200:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003a210:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003a220:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a230:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003a240:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a250:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a | 0003a260:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003a | 0003a270:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003a280:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003a290:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003a2a0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003a2b0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003a2c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003a2d0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003a2e0:·616d·653a·2045·6e73·7572·6520·646e·662d··ame:·Ensure·dnf- | |||
| 0003a2f0:·6175·746f·6d61·7469·6320·6973·2069·6e73··automatic·is·ins | |||
| 0003a080:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003a090:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003a0a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003a0b0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003a0c0:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 0003a0d0:·6f6d·6174·6963·2069·7320·696e·7374·616c··omatic·is·instal | |||
| 0003a0e0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003a0f0:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 0003a100:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 0003a110:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 0003a120:·3a0a·2020·2d20·4343·452d·3931·3437·362d··:.··-·CCE-91476- | |||
| 0003a130:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003a140:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003a150:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003a160:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003a170:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003a180:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003a | 0003a300:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | ||
| 0003a310:·3a0a·2020·2020·6e61·6d65·3a20·646e·662d··:.····name:·dnf- | |||
| 0003a320:·6175·746f·6d61·7469·630a·2020·2020·7374··automatic.····st | |||
| 0003a330:·6174·653a·2070·7265·7365·6e74·0a20·2074··ate:·present.··t | |||
| 0003a340:·6167·733a·0a20·202d·2043·4345·2d39·3134··ags:.··-·CCE-914 | |||
| 0003a350:·3736·2d32·0a20·202d·2065·6e61·626c·655f··76-2.··-·enable_ | |||
| 0003a360:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003a370:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003a380:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003a390:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003a3a0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003a3b0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003a3c0:·6167·655f·646e·662d·6175·746f·6d61·7469··age_dnf-automati | |||
| 0003a3d0:·635f·696e·7374·616c·6c65·640a·3c2f·636f··c_installed.</co | |||
| 0003a1a0:·5f64·6e66·2d61·7574·6f6d·6174·6963·5f69··_dnf-automatic_i | |||
| 0003a1b0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003a1c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| Max diff block lines reached; 1957844/1972250 bytes (99.27%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 99, 14 lines modified | Offset 99, 21 lines modified | ||
| 99 | include·install_dnf-automatic | 99 | include·install_dnf-automatic |
| 100 | class·install_dnf-automatic·{ | 100 | class·install_dnf-automatic·{ |
| 101 | ··package·{·'dnf-automatic': | 101 | ··package·{·'dnf-automatic': |
| 102 | ····ensure·=>·'installed', | 102 | ····ensure·=>·'installed', |
| 103 | ··} | 103 | ··} |
| 104 | } | 104 | } |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 110 | zypper·install·-y·"dnf-automatic" | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 110 | -·name:·Ensure·dnf-automatic·is·installed | 116 | -·name:·Ensure·dnf-automatic·is·installed |
| 111 | ··package: | 117 | ··package: |
| Offset 121, 21 lines modified | Offset 128, 14 lines modified | ||
| 121 | ··-·no_reboot_needed | 128 | ··-·no_reboot_needed |
| 122 | ··-·package_dnf-automatic_installed | 129 | ··-·package_dnf-automatic_installed |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | [[packages]] | 131 | [[packages]] |
| 125 | name·=·"dnf-automatic" | 132 | name·=·"dnf-automatic" |
| 126 | version·=·"*" | 133 | version·=·"*" |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | zypper·install·-y·"dnf-automatic" | ||
| 133 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 134 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 135 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 136 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 136 | automatic.conf. | 137 | automatic.conf. |
| 137 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 138 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 138 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 139 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 139 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 140 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 146, 37 lines modified | Offset 146, 14 lines modified | ||
| 146 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 146 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 147 | Identifiers:·CCE-91474-7 | 147 | Identifiers:·CCE-91474-7 |
| 148 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 148 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 149 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 149 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 150 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 150 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 151 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 151 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 152 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 152 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 158 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 159 | ··ini_file: | ||
| 160 | ····dest:·/etc/dnf/automatic.conf | ||
| 161 | ····section:·commands | ||
| 162 | ····option:·apply_updates | ||
| 163 | ····value:·'yes' | ||
| 164 | ····create:·true | ||
| 165 | ··tags: | ||
| 166 | ··-·CCE-91474-7 | ||
| 167 | ··-·NIST-800-53-CM-6(a) | ||
| 168 | ··-·NIST-800-53-SI-2(5) | ||
| 169 | ··-·NIST-800-53-SI-2(c) | ||
| 170 | ··-·dnf-automatic_apply_updates | ||
| 171 | ··-·low_complexity | ||
| 172 | ··-·medium_disruption | ||
| 173 | ··-·medium_severity | ||
| 174 | ··-·no_reboot_needed | ||
| 175 | ··-·unknown_strategy | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 177 | found=false | 154 | found=false |
| 178 | #·set·value·in·all·files·if·they·contain·section·or·key | 155 | #·set·value·in·all·files·if·they·contain·section·or·key |
| 179 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | 156 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do |
| 180 | ····if·[·!·-e·"$f"·];·then | 157 | ····if·[·!·-e·"$f"·];·then |
| Offset 205, 50 lines modified | Offset 182, 50 lines modified | ||
| 205 | if·!·$found·;·then | 182 | if·!·$found·;·then |
| 206 | ····file=$(echo·"/etc/dnf/automatic.conf"·|·cut·-f1·-d·'·') | 183 | ····file=$(echo·"/etc/dnf/automatic.conf"·|·cut·-f1·-d·'·') |
| 207 | ····mkdir·-p·"$(dirname·"$file")" | 184 | ····mkdir·-p·"$(dirname·"$file")" |
| 208 | ····echo·-e·"[commands]\napply_updates=yes"·>>·"$file" | 185 | ····echo·-e·"[commands]\napply_updates=yes"·>>·"$file" |
| 209 | fi | 186 | fi |
| 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 211 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set | ||
| 212 | upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. | ||
| 213 | ·············By·default,·dnf-automatic·installs·all·available·updates.·Reducing·the·amount | ||
| 214 | Rationale:···of·updated·packages·only·to·updates·that·were·issued·as·a·part·of·a·security | ||
| 215 | ·············advisory·increases·the·system·stability. | ||
| 216 | Severity: ···low | ||
| 217 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_security_updates_only | ||
| 218 | Identifiers:·CCE-91478-8 | ||
| 219 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | ||
| 220 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | ||
| 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | ||
| 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | ||
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown |
| 228 | -·name:·Configure·dnf-automatic·to·Install· | 192 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically |
| 229 | ··ini_file: | 193 | ··ini_file: |
| 230 | ····dest:·/etc/dnf/automatic.conf | 194 | ····dest:·/etc/dnf/automatic.conf |
| 231 | ····section:·commands | 195 | ····section:·commands |
| Max diff block lines reached; 141429/147421 bytes (95.94%) of diff not shown. | |||
| Offset 14312, 15 lines modified | Offset 14312, 15 lines modified | ||
| 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037ee0:·323 | 00037ee0:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15209, 129 lines modified | Offset 15209, 129 lines modified | ||
| 0003b680:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b680:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b690:·6964·6d35·3339·3022·2074·6162·696e·6465··idm5390"·tabinde | 0003b690:·6964·6d35·3339·3022·2074·6162·696e·6465··idm5390"·tabinde | ||
| 0003b6a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b6a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b6b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b6b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b6c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b6c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b6d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b6d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b6e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b6e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b6f0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b700:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b710:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b720:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b730:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b740:·646d·3533·3930·223e·3c74·6162·6c65·2063··dm5390"><table·c | |||
| 0003b750:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b760:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b770:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b780:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b790:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b7a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b7b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b7c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b7d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b7e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b7f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b800:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b810:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b820:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b830:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b840:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b850:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b860:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b870:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b880:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b890:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b8a0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b8b0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b8c0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b8d0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b8e0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b8f0:·6773·3a0a·2020·2d20·4343·452d·3833·3036··gs:.··-·CCE-8306 | |||
| 0003b900:·372d·390a·2020·2d20·434a·4953·2d35·2e31··7-9.··-·CJIS-5.1 | |||
| 0003b910:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b920:·5449·472d·534c·4553·2d31·322d·3031·3034··TIG-SLES-12-0104 | |||
| 0003b930:·3939·0a20·202d·204e·4953·542d·3830·302d··99.··-·NIST-800- | |||
| 0003b940:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b950:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b960:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b970:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b980:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b990:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b9a0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b9b0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b9c0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b9d0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b9e0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b9f0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003ba00:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003ba10:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003ba20:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ba30:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ba40:·6765·743d·2223·6964·6d35·3339·3122·2074··get="#idm5391"·t | |||
| 0003ba50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ba60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ba70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ba80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ba90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003baa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003bab0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003bac0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003bad0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bae0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003baf0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bb00:·646d·3533·3931·223e·3c70·7265·3e3c·636f··dm5391"><pre><co | |||
| 0003bb10:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003bb20:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003bb30:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003bb40:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003bb50:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bb60:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bb70:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bb80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bb90:·6964·6d35·3339·3222·2074·6162·696e·6465··idm5392"·tabinde | |||
| 0003bba0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bbb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bbc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bbd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bbe0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b | 0003b6f0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003b | 0003b700:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b | 0003b710:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b720:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b730:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003b | 0003b740:·3339·3022·3e3c·7461·626c·6520·636c·6173··390"><table·clas | ||
| 0003b | 0003b750:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b760:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b770:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b780:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b790:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b7a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b7b0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003b7c0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b7d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b7e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003b7f0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003b800:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003b810:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b | 0003b820:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b | 0003b830:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 0003b | 0003b840:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003b | 0003b850:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 0003b | 0003b860:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| Max diff block lines reached; 18852520/18870100 bytes (99.91%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·2·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·2·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 140, 14 lines modified | Offset 140, 27 lines modified | ||
| 140 | include·install_aide | 140 | include·install_aide |
| 141 | class·install_aide·{ | 141 | class·install_aide·{ |
| 142 | ··package·{·'aide': | 142 | ··package·{·'aide': |
| 143 | ····ensure·=>·'installed', | 143 | ····ensure·=>·'installed', |
| 144 | ··} | 144 | ··} |
| 145 | } | 145 | } |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 153 | zypper·install·-y·"aide" | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | -·name:·Ensure·aide·is·installed | 162 | -·name:·Ensure·aide·is·installed |
| 152 | ··package: | 163 | ··package: |
| Offset 168, 27 lines modified | Offset 181, 14 lines modified | ||
| 168 | ··-·no_reboot_needed | 181 | ··-·no_reboot_needed |
| 169 | ··-·package_aide_installed | 182 | ··-·package_aide_installed |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | [[packages]] | 184 | [[packages]] |
| 172 | name·=·"aide" | 185 | name·=·"aide" |
| 173 | version·=·"*" | 186 | version·=·"*" |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 181 | zypper·install·-y·"aide" | ||
| 182 | else | ||
| 183 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 184 | fi | ||
| 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 186 | Run·the·following·command·to·generate·a·new·database: | 188 | Run·the·following·command·to·generate·a·new·database: |
| 187 | $·sudo·/usr/bin/aide·--init | 189 | $·sudo·/usr/bin/aide·--init |
| 188 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 190 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 189 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 191 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 190 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 192 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 191 | generated·database·can·be·installed·as·follows: | 193 | generated·database·can·be·installed·as·follows: |
| Offset 215, 14 lines modified | Offset 215, 29 lines modified | ||
| 215 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 215 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 217 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 217 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 218 | ·············_\x8c_\x8i_\x8s············1.4.1 | 218 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 219 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 219 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 221 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 221 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 223 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 224 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 225 | zypper·-q·--no-remote·ref | ||
| 226 | zypper·install·-y·"aide" | ||
| 227 | /usr/bin/aide·--init | ||
| 228 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 229 | else | ||
| 230 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 231 | fi | ||
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 233 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 234 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 235 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 236 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 227 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated | 237 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated |
| 228 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref | 238 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref |
| Offset 318, 29 lines modified | Offset 333, 14 lines modified | ||
| 318 | ··-·PCI-DSSv4-11.5.2 | 333 | ··-·PCI-DSSv4-11.5.2 |
| 319 | ··-·aide_build_database | 334 | ··-·aide_build_database |
| 320 | ··-·low_complexity | 335 | ··-·low_complexity |
| 321 | ··-·low_disruption | 336 | ··-·low_disruption |
| 322 | ··-·medium_severity | 337 | ··-·medium_severity |
| 323 | ··-·no_reboot_needed | 338 | ··-·no_reboot_needed |
| 324 | ··-·restrict_strategy | 339 | ··-·restrict_strategy |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 327 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 328 | zypper·-q·--no-remote·ref | ||
| 329 | zypper·install·-y·"aide" | ||
| 330 | /usr/bin/aide·--init | ||
| 331 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 332 | else | ||
| 333 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 334 | fi | ||
| 335 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 340 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 336 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of·AIDE·at·4: | 341 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of·AIDE·at·4: |
| 337 | 05am·using·cron,·add·the·following·line·to·/etc/crontab: | 342 | 05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| Max diff block lines reached; 1796589/1801976 bytes (99.70%) of diff not shown. | |||
| Offset 14312, 16 lines modified | Offset 14312, 16 lines modified | ||
| 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·2028·6173·206f·6620·3230·323 | 00037ee0:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00037ef0:·3 | 00037ef0:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15187, 130 lines modified | Offset 15187, 130 lines modified | ||
| 0003b520:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b520:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b530:·3d22·2369·646d·3533·3930·2220·7461·6269··="#idm5390"·tabi | 0003b530:·3d22·2369·646d·3533·3930·2220·7461·6269··="#idm5390"·tabi | ||
| 0003b540:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b540:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b550:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b550:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b560:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b560:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b570:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b570:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b580:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b580:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b590:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b5a0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b5b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b5c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b5d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b5e0:·3d22·6964·6d35·3339·3022·3e3c·7461·626c··="idm5390"><tabl | |||
| 0003b5f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b600:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b610:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b620:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b630:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b640:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b650:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b660:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b670:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b680:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b690:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b6a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b6b0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b6c0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b6d0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b6e0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b6f0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b700:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b710:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b720:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b730:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b740:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b750:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b760:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b770:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b780:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b790:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003b7a0:·3330·3637·2d39·0a20·202d·2043·4a49·532d··3067-9.··-·CJIS- | |||
| 0003b7b0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b7c0:·412d·5354·4947·2d53·4c45·532d·3132·2d30··A-STIG-SLES-12-0 | |||
| 0003b7d0:·3130·3439·390a·2020·2d20·4e49·5354·2d38··10499.··-·NIST-8 | |||
| 0003b7e0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b7f0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b800:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b810:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b820:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b830:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b840:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b850:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b860:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b870:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b880:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b890:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b8a0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b8b0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b8c0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b8d0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b8e0:·7461·7267·6574·3d22·2369·646d·3533·3931··target="#idm5391 | |||
| 0003b8f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b900:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b910:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b920:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b930:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b940:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b950:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b960:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b970:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b980:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b990:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b9a0:·3d22·6964·6d35·3339·3122·3e3c·7072·653e··="idm5391"><pre> | |||
| 0003b9b0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b9c0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b9d0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b9e0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b9f0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ba00:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ba10:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ba20:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ba30:·3d22·2369·646d·3533·3932·2220·7461·6269··="#idm5392"·tabi | |||
| 0003ba40:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ba50:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ba60:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003ba70:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ba80:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b | 0003b590:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003b | 0003b5a0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003b | 0003b5b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b5c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b | 0003b5d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b5e0:·646d·3533·3930·223e·3c74·6162·6c65·2063··dm5390"><table·c | ||
| 0003b | 0003b5f0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b | 0003b600:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b | 0003b610:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b | 0003b620:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b | 0003b630:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b | 0003b640:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b650:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003b660:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b670:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b680:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b | 0003b690:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b | 0003b6a0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003b6b0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b | 0003b6c0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b | 0003b6d0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b | 0003b6e0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 0003b | 0003b6f0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| Max diff block lines reached; 7847777/7865633 bytes (99.77%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 137, 14 lines modified | Offset 137, 27 lines modified | ||
| 137 | include·install_aide | 137 | include·install_aide |
| 138 | class·install_aide·{ | 138 | class·install_aide·{ |
| 139 | ··package·{·'aide': | 139 | ··package·{·'aide': |
| 140 | ····ensure·=>·'installed', | 140 | ····ensure·=>·'installed', |
| 141 | ··} | 141 | ··} |
| 142 | } | 142 | } |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 150 | zypper·install·-y·"aide" | ||
| 151 | else | ||
| 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 153 | fi | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | -·name:·Ensure·aide·is·installed | 159 | -·name:·Ensure·aide·is·installed |
| 149 | ··package: | 160 | ··package: |
| Offset 165, 27 lines modified | Offset 178, 14 lines modified | ||
| 165 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 166 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | [[packages]] | 181 | [[packages]] |
| 169 | name·=·"aide" | 182 | name·=·"aide" |
| 170 | version·=·"*" | 183 | version·=·"*" |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 178 | zypper·install·-y·"aide" | ||
| 179 | else | ||
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 181 | fi | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | Run·the·following·command·to·generate·a·new·database: | 185 | Run·the·following·command·to·generate·a·new·database: |
| 184 | $·sudo·/usr/bin/aide·--init | 186 | $·sudo·/usr/bin/aide·--init |
| 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 187 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 186 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 188 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 187 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 189 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 188 | generated·database·can·be·installed·as·follows: | 190 | generated·database·can·be·installed·as·follows: |
| Offset 212, 14 lines modified | Offset 212, 29 lines modified | ||
| 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 215 | ·············_\x8c_\x8i_\x8s············1.4.1 | 215 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 218 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 218 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 220 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 221 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 222 | zypper·-q·--no-remote·ref | ||
| 223 | zypper·install·-y·"aide" | ||
| 224 | /usr/bin/aide·--init | ||
| 225 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 226 | else | ||
| 227 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 228 | fi | ||
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 224 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated | 234 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated |
| 225 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref | 235 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref |
| Offset 315, 29 lines modified | Offset 330, 14 lines modified | ||
| 315 | ··-·PCI-DSSv4-11.5.2 | 330 | ··-·PCI-DSSv4-11.5.2 |
| 316 | ··-·aide_build_database | 331 | ··-·aide_build_database |
| 317 | ··-·low_complexity | 332 | ··-·low_complexity |
| 318 | ··-·low_disruption | 333 | ··-·low_disruption |
| 319 | ··-·medium_severity | 334 | ··-·medium_severity |
| 320 | ··-·no_reboot_needed | 335 | ··-·no_reboot_needed |
| 321 | ··-·restrict_strategy | 336 | ··-·restrict_strategy |
| 322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 323 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 324 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 325 | zypper·-q·--no-remote·ref | ||
| 326 | zypper·install·-y·"aide" | ||
| 327 | /usr/bin/aide·--init | ||
| 328 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 329 | else | ||
| 330 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 331 | fi | ||
| 332 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 337 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 333 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of·AIDE·at·4: | 338 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of·AIDE·at·4: |
| 334 | 05am·using·cron,·add·the·following·line·to·/etc/crontab: | 339 | 05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| Max diff block lines reached; 969906/975303 bytes (99.45%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037f00:·2d31·3 | 00037f00:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15174, 129 lines modified | Offset 15174, 129 lines modified | ||
| 0003b450:·6574·3d22·2369·646d·3533·3930·2220·7461··et="#idm5390"·ta | 0003b450:·6574·3d22·2369·646d·3533·3930·2220·7461··et="#idm5390"·ta | ||
| 0003b460:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b460:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b470:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b470:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b480:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b480:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b490:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b490:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b4a0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b4a0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b4b0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b4b0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b4c0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b4d0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4e0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4f0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b500:·6964·3d22·6964·6d35·3339·3022·3e3c·7461··id="idm5390"><ta | |||
| 0003b510:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b520:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b530:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b540:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b550:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b560:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b570:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b580:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b590:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b5a0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b5b0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b5c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b5d0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b5e0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b5f0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b600:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b610:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b620:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b630:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b640:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b650:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b660:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b670:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b680:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b690:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b6a0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b6b0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b6c0:·2d38·3330·3637·2d39·0a20·202d·2043·4a49··-83067-9.··-·CJI | |||
| 0003b6d0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b6e0:·4953·412d·5354·4947·2d53·4c45·532d·3132··ISA-STIG-SLES-12 | |||
| 0003b6f0:·2d30·3130·3439·390a·2020·2d20·4e49·5354··-010499.··-·NIST | |||
| 0003b700:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b710:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b720:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b730:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b740:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b750:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b760:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b770:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b780:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b790:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b7a0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b7b0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b7c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b7d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b7e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b7f0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b800:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | |||
| 0003b810:·3931·2220·7461·6269·6e64·6578·3d22·3022··91"·tabindex="0" | |||
| 0003b820:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b830:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b840:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b850:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b860:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b870:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b880:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b890:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b8a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b8b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b8c0:·6964·3d22·6964·6d35·3339·3122·3e3c·7072··id="idm5391"><pr | |||
| 0003b8d0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b8e0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b8f0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b900:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b910:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b920:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b930:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b940:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b950:·6574·3d22·2369·646d·3533·3932·2220·7461··et="#idm5392"·ta | |||
| 0003b960:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b970:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b980:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b990:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b9a0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b9b0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b | 0003b4c0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b | 0003b4d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003b4e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003b4f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003b500:·2269·646d·3533·3930·223e·3c74·6162·6c65··"idm5390"><table | ||
| 0003b | 0003b510:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b520:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b530:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b540:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b550:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b560:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b570:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003b580:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b590:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b | 0003b5a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003b5b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003b5c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b5d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b | 0003b5e0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003b | 0003b5f0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b | 0003b600:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b | 0003b610:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b | 0003b620:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| Max diff block lines reached; 7622015/7639733 bytes (99.77%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 134, 14 lines modified | Offset 134, 27 lines modified | ||
| 134 | include·install_aide | 134 | include·install_aide |
| 135 | class·install_aide·{ | 135 | class·install_aide·{ |
| 136 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 137 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 138 | ··} | 138 | ··} |
| 139 | } | 139 | } |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 147 | zypper·install·-y·"aide" | ||
| 148 | else | ||
| 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 150 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Ensure·aide·is·installed | 156 | -·name:·Ensure·aide·is·installed |
| 146 | ··package: | 157 | ··package: |
| Offset 162, 27 lines modified | Offset 175, 14 lines modified | ||
| 162 | ··-·no_reboot_needed | 175 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 176 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | [[packages]] | 178 | [[packages]] |
| 166 | name·=·"aide" | 179 | name·=·"aide" |
| 167 | version·=·"*" | 180 | version·=·"*" |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 175 | zypper·install·-y·"aide" | ||
| 176 | else | ||
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 178 | fi | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/bin/aide·--init | 183 | $·sudo·/usr/bin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 183 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 185 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 184 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 186 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 185 | generated·database·can·be·installed·as·follows: | 187 | generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 29 lines modified | ||
| 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 212 | ·············_\x8c_\x8i_\x8s············1.4.1 | 212 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 219 | zypper·-q·--no-remote·ref | ||
| 220 | zypper·install·-y·"aide" | ||
| 221 | /usr/bin/aide·--init | ||
| 222 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 223 | else | ||
| 224 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 225 | fi | ||
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 217 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 218 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 219 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 220 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 221 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated | 231 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated |
| 222 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref | 232 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref |
| Offset 312, 29 lines modified | Offset 327, 14 lines modified | ||
| 312 | ··-·PCI-DSSv4-11.5.2 | 327 | ··-·PCI-DSSv4-11.5.2 |
| 313 | ··-·aide_build_database | 328 | ··-·aide_build_database |
| 314 | ··-·low_complexity | 329 | ··-·low_complexity |
| 315 | ··-·low_disruption | 330 | ··-·low_disruption |
| 316 | ··-·medium_severity | 331 | ··-·medium_severity |
| 317 | ··-·no_reboot_needed | 332 | ··-·no_reboot_needed |
| 318 | ··-·restrict_strategy | 333 | ··-·restrict_strategy |
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 320 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 321 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 322 | zypper·-q·--no-remote·ref | ||
| 323 | zypper·install·-y·"aide" | ||
| 324 | /usr/bin/aide·--init | ||
| 325 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 326 | else | ||
| 327 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 328 | fi | ||
| 329 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 334 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 330 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of·AIDE·at·4: | 335 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of·AIDE·at·4: |
| 331 | 05am·using·cron,·add·the·following·line·to·/etc/crontab: | 336 | 05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| Max diff block lines reached; 946550/951957 bytes (99.43%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ef0:·206f·6620·3230·323 | 00037ef0:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15200, 130 lines modified | Offset 15200, 130 lines modified | ||
| 0003b5f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b5f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b600:·2223·6964·6d35·3339·3022·2074·6162·696e··"#idm5390"·tabin | 0003b600:·2223·6964·6d35·3339·3022·2074·6162·696e··"#idm5390"·tabin | ||
| 0003b610:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b610:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b620:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b620:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b630:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b630:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b640:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b640:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b650:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b650:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b660:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b670:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b680:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b690:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b6a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b6b0:·2269·646d·3533·3930·223e·3c74·6162·6c65··"idm5390"><table | |||
| 0003b6c0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b6d0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b6e0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b6f0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b700:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b710:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b720:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b730:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b740:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b750:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b760:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b770:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b780:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b790:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b7a0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b7b0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b7c0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b7d0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b7e0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b7f0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b800:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b810:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b820:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b830:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b840:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b850:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b860:·7461·6773·3a0a·2020·2d20·4343·452d·3833··tags:.··-·CCE-83 | |||
| 0003b870:·3036·372d·390a·2020·2d20·434a·4953·2d35··067-9.··-·CJIS-5 | |||
| 0003b880:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b890:·2d53·5449·472d·534c·4553·2d31·322d·3031··-STIG-SLES-12-01 | |||
| 0003b8a0:·3034·3939·0a20·202d·204e·4953·542d·3830··0499.··-·NIST-80 | |||
| 0003b8b0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b8c0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b8d0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b8e0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b8f0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b900:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b910:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b920:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b930:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b940:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b950:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b960:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b970:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b980:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b990:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b9a0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b9b0:·6172·6765·743d·2223·6964·6d35·3339·3122··arget="#idm5391" | |||
| 0003b9c0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b9d0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b9e0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b9f0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003ba00:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003ba10:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003ba20:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003ba30:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003ba40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ba50:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ba60:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ba70:·2269·646d·3533·3931·223e·3c70·7265·3e3c··"idm5391"><pre>< | |||
| 0003ba80:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003ba90:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003baa0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003bab0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bac0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bad0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bae0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003baf0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bb00:·2223·6964·6d35·3339·3222·2074·6162·696e··"#idm5392"·tabin | |||
| 0003bb10:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bb20:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bb30:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bb40:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bb50:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003b660:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b | 0003b670:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b | 0003b680:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b690:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b6a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003b6b0:·6d35·3339·3022·3e3c·7461·626c·6520·636c··m5390"><table·cl | ||
| 0003b | 0003b6c0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003b6d0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003b6e0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003b6f0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003b700:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003b710:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003b720:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003b730:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b740:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003b750:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b | 0003b760:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b | 0003b770:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003b780:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b | 0003b790:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b | 0003b7a0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | ||
| 0003b | 0003b7b0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003b | 0003b7c0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 0003b | 0003b7d0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| Max diff block lines reached; 18778158/18795876 bytes (99.91%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·Level·2·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·Level·2·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 138, 14 lines modified | Offset 138, 27 lines modified | ||
| 138 | include·install_aide | 138 | include·install_aide |
| 139 | class·install_aide·{ | 139 | class·install_aide·{ |
| 140 | ··package·{·'aide': | 140 | ··package·{·'aide': |
| 141 | ····ensure·=>·'installed', | 141 | ····ensure·=>·'installed', |
| 142 | ··} | 142 | ··} |
| 143 | } | 143 | } |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 151 | zypper·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | -·name:·Ensure·aide·is·installed | 160 | -·name:·Ensure·aide·is·installed |
| 150 | ··package: | 161 | ··package: |
| Offset 166, 27 lines modified | Offset 179, 14 lines modified | ||
| 166 | ··-·no_reboot_needed | 179 | ··-·no_reboot_needed |
| 167 | ··-·package_aide_installed | 180 | ··-·package_aide_installed |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 169 | [[packages]] | 182 | [[packages]] |
| 170 | name·=·"aide" | 183 | name·=·"aide" |
| 171 | version·=·"*" | 184 | version·=·"*" |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 178 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 179 | zypper·install·-y·"aide" | ||
| 180 | else | ||
| 181 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 182 | fi | ||
| 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 184 | Run·the·following·command·to·generate·a·new·database: | 186 | Run·the·following·command·to·generate·a·new·database: |
| 185 | $·sudo·/usr/bin/aide·--init | 187 | $·sudo·/usr/bin/aide·--init |
| 186 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 188 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 187 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 189 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 188 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 190 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 189 | generated·database·can·be·installed·as·follows: | 191 | generated·database·can·be·installed·as·follows: |
| Offset 213, 14 lines modified | Offset 213, 29 lines modified | ||
| 213 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 213 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 214 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 214 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 216 | ·············_\x8c_\x8i_\x8s············1.4.1 | 216 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 217 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 217 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 219 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 219 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 221 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 222 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 223 | zypper·-q·--no-remote·ref | ||
| 224 | zypper·install·-y·"aide" | ||
| 225 | /usr/bin/aide·--init | ||
| 226 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 227 | else | ||
| 228 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 229 | fi | ||
| 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 225 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated | 235 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated |
| 226 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref | 236 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref |
| Offset 316, 29 lines modified | Offset 331, 14 lines modified | ||
| 316 | ··-·PCI-DSSv4-11.5.2 | 331 | ··-·PCI-DSSv4-11.5.2 |
| 317 | ··-·aide_build_database | 332 | ··-·aide_build_database |
| 318 | ··-·low_complexity | 333 | ··-·low_complexity |
| 319 | ··-·low_disruption | 334 | ··-·low_disruption |
| 320 | ··-·medium_severity | 335 | ··-·medium_severity |
| 321 | ··-·no_reboot_needed | 336 | ··-·no_reboot_needed |
| 322 | ··-·restrict_strategy | 337 | ··-·restrict_strategy |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 325 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 326 | zypper·-q·--no-remote·ref | ||
| 327 | zypper·install·-y·"aide" | ||
| 328 | /usr/bin/aide·--init | ||
| 329 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 330 | else | ||
| 331 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 332 | fi | ||
| 333 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 338 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 334 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of·AIDE·at·4: | 339 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of·AIDE·at·4: |
| 335 | 05am·using·cron,·add·the·following·line·to·/etc/crontab: | 340 | 05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| Max diff block lines reached; 1785645/1791048 bytes (99.70%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037df0:·206f·6620·3230·323 | 00037df0:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15218, 306 lines modified | Offset 15218, 306 lines modified | ||
| 0003b710:·2d74·6172·6765·743d·2223·6964·6d35·3034··-target="#idm504 | 0003b710:·2d74·6172·6765·743d·2223·6964·6d35·3034··-target="#idm504 | ||
| 0003b720:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003b720:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003b730:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b730:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b740:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b740:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b750:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b750:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b760:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b760:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b770:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b770:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b780:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b790:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b7a0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b7b0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b7c0:·7073·6522·2069·643d·2269·646d·3530·3437··pse"·id="idm5047 | |||
| 0003b7d0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b7e0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b7f0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b800:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b810:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b820:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b830:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | |||
| 0003b840:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b850:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | |||
| 0003b860:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b870:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b880:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b890:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b8a0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | |||
| 0003b8b0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | |||
| 0003b8c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b8d0:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | |||
| 0003b8e0:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | |||
| 0003b8f0:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | |||
| 0003b900:·6d61·6e64·270a·2020·7365·745f·6661·6374··mand'.··set_fact | |||
| 0003b910:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | |||
| 0003b920:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | |||
| 0003b930:·636d·643a·207a·7970·7065·7220·7265·696e··cmd:·zypper·rein | |||
| 0003b940:·7374·616c·6c20·2d79·0a20·2077·6865·6e3a··stall·-y.··when: | |||
| 0003b950:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | |||
| 0003b960:·7574·696f·6e20·696e·205b·2022·4665·646f··ution·in·[·"Fedo | |||
| 0003b970:·7261·222c·2022·5265·6448·6174·222c·2022··ra",·"RedHat",·" | |||
| 0003b980:·4365·6e74·4f53·222c·2022·4f72·6163·6c65··CentOS",·"Oracle | |||
| 0003b990:·4c69·6e75·7822·205d·0a20·2074·6167·733a··Linux"·].··tags: | |||
| 0003b9a0:·0a20·202d·2043·4345·2d39·3136·3332·2d30··.··-·CCE-91632-0 | |||
| 0003b9b0:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | |||
| 0003b9c0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | |||
| 0003b9d0:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | |||
| 0003b9e0:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | |||
| 0003b9f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003ba00:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | |||
| 0003ba10:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | |||
| 0003ba20:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003ba30:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | |||
| 0003ba40:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | |||
| 0003ba50:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | |||
| 0003ba60:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | |||
| 0003ba70:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | |||
| 0003ba80:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003ba90:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003baa0:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | |||
| 0003bab0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003bac0:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | |||
| 0003bad0:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | |||
| 0003bae0:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | |||
| 0003baf0:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | |||
| 0003bb00:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | |||
| 0003bb10:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | |||
| 0003bb20:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | |||
| 0003bb30:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | |||
| 0003bb40:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | |||
| 0003bb50:·6c6c·2063·6f6d·6d61·6e64·2028·7a79·7070··ll·command·(zypp | |||
| 0003bb60:·6572·2927·0a20·2073·6574·5f66·6163·743a··er)'.··set_fact: | |||
| 0003bb70:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | |||
| 0003bb80:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | |||
| 0003bb90:·6d64·3a20·7a79·7070·6572·2069·6e20·2d66··md:·zypper·in·-f | |||
| 0003bba0:·202d·790a·2020·7768·656e·3a20·616e·7369···-y.··when:·ansi | |||
| 0003bbb0:·626c·655f·6469·7374·7269·6275·7469·6f6e··ble_distribution | |||
| 0003bbc0:·203d·3d20·2253·4c45·5322·0a20·2074·6167···==·"SLES".··tag | |||
| 0003bbd0:·733a·0a20·202d·2043·4345·2d39·3136·3332··s:.··-·CCE-91632 | |||
| 0003bbe0:·2d30·0a20·202d·2043·4a49·532d·352e·3130··-0.··-·CJIS-5.10 | |||
| 0003bbf0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | |||
| 0003bc00:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | |||
| 0003bc10:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | |||
| 0003bc20:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | |||
| 0003bc30:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003bc40:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bc50:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | |||
| 0003bc60:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | |||
| 0003bc70:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | |||
| 0003bc80:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bc90:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | |||
| 0003bca0:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | |||
| 0003bcb0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003bcc0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003bcd0:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | |||
| 0003bce0:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | |||
| 0003bcf0:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| 0003bd00:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | |||
| 0003bd10:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | |||
| 0003bd20:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 0003bd30:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 0003bd40:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | |||
| 0003bd50:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | |||
| 0003bd60:·5265·6164·2066·696c·6573·2077·6974·6820··Read·files·with· | |||
| 0003bd70:·696e·636f·7272·6563·7420·6861·7368·0a20··incorrect·hash.· | |||
| 0003bd80:·2063·6f6d·6d61·6e64·3a20·7270·6d20·2d56···command:·rpm·-V | |||
| 0003bd90:·6120·2d2d·6e6f·6465·7073·202d·2d6e·6f73··a·--nodeps·--nos | |||
| 0003bda0:·697a·6520·2d2d·6e6f·6d74·696d·6520·2d2d··ize·--nomtime·-- | |||
| 0003bdb0:·6e6f·7264·6576·202d·2d6e·6f63·6170·7320··nordev·--nocaps· | |||
| 0003bdc0:·2d2d·6e6f·6c69·6e6b·746f·202d·2d6e·6f75··--nolinkto·--nou | |||
| 0003bdd0:·7365·720a·2020·2020·2d2d·6e6f·6772·6f75··ser.····--nogrou | |||
| 0003bde0:·7020·2d2d·6e6f·6d6f·6465·202d·2d6e·6f67··p·--nomode·--nog | |||
| 0003bdf0:·686f·7374·202d·2d6e·6f63·6f6e·6669·670a··host·--noconfig. | |||
| Max diff block lines reached; 18129745/18171751 bytes (99.77%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·12 | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·12 |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 41 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 134, 14 lines modified | Offset 134, 29 lines modified | ||
| 134 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 134 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 135 | ····························A.14.2.3,·A.14.2.4 | 135 | ····························A.14.2.3,·A.14.2.4 |
| 136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 138 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 138 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 140 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 143 | get·files·names | ||
| 144 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 145 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 146 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 147 | new·line | ||
| 148 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 149 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 150 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 146 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 156 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 147 | ··set_fact: | 157 | ··set_fact: |
| Offset 273, 29 lines modified | Offset 288, 14 lines modified | ||
| 273 | ··-·PCI-DSSv4-11.5.2 | 288 | ··-·PCI-DSSv4-11.5.2 |
| 274 | ··-·high_complexity | 289 | ··-·high_complexity |
| 275 | ··-·high_severity | 290 | ··-·high_severity |
| 276 | ··-·medium_disruption | 291 | ··-·medium_disruption |
| 277 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 278 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 279 | ··-·rpm_verify_hashes | 294 | ··-·rpm_verify_hashes |
| 280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 281 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 282 | get·files·names | ||
| 283 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 284 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 285 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 286 | new·line | ||
| 287 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 288 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 289 | fi | ||
| 290 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 291 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 296 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 292 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 297 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 293 | which·can·be·found·with: | 298 | which·can·be·found·with: |
| 294 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 299 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 295 | run·the·following·command·to·determine·which·package·owns·it: | 300 | run·the·following·command·to·determine·which·package·owns·it: |
| 296 | $·rpm·-qf·FILENAME | 301 | $·rpm·-qf·FILENAME |
| Offset 377, 14 lines modified | Offset 377, 46 lines modified | ||
| 377 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 377 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 378 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 378 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 379 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 379 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 380 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 380 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 381 | ····························SRG-OS-000278-GPOS-00108 | 381 | ····························SRG-OS-000278-GPOS-00108 |
| 382 | ·············_\x8c_\x8i_\x8s············6.1.1 | 382 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 383 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 383 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 385 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 386 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 387 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 388 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 389 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 390 | declare·-A·SETPERMS_RPM_DICT | ||
| 391 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 392 | #·is·expected·by·the·RPM·database | ||
| 393 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 394 | $NF·}') | ||
| 395 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 396 | do | ||
| 397 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 398 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 399 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 400 | ········do | ||
| 401 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 402 | duplicates. | ||
| 403 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 404 | ········done | ||
| 405 | done | ||
| 406 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 407 | #·correct·values | ||
| 408 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 409 | do | ||
| 410 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 411 | done | ||
| 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 412 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 385 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 413 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 386 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 414 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 387 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 415 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 388 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 416 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 389 | -·name:·Read·list·of·files·with·incorrect·permissions | 417 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 390 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 418 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 465, 46 lines modified | Offset 497, 14 lines modified | ||
| 465 | ··-·PCI-DSSv4-11.5.2 | 497 | ··-·PCI-DSSv4-11.5.2 |
| 466 | ··-·high_complexity | 498 | ··-·high_complexity |
| 467 | ··-·high_severity | 499 | ··-·high_severity |
| 468 | ··-·medium_disruption | 500 | ··-·medium_disruption |
| Max diff block lines reached; 1433706/1439907 bytes (99.57%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037d90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037da0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037da0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037db0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037db0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037dc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037dc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037dd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037dd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037de0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037de0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037df0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037df0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e00:·323 | 00037e00:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00037e10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037e30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037e30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037e40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037e40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037e50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037e50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037e60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037e60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037e70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037e70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15163, 306 lines modified | Offset 15163, 306 lines modified | ||
| 0003b3a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b3a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b3b0:·6964·6d35·3034·3722·2074·6162·696e·6465··idm5047"·tabinde | 0003b3b0:·6964·6d35·3034·3722·2074·6162·696e·6465··idm5047"·tabinde | ||
| 0003b3c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b3c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b3d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b3d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b3e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b3e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b3f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b3f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b400:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b400:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b410:·656d·6564·6961·7469·6f6e·20 | 0003b410:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003b420:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b430:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b440:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b450:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b460:·3034·3722·3e3c·7072·653e·3c63·6f64·653e··047"><pre><code> | |||
| 0003b470:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | |||
| 0003b480:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | |||
| 0003b490:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | |||
| 0003b4a0:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | |||
| 0003b4b0:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | |||
| 0003b4c0:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | |||
| 0003b4d0:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | |||
| 0003b4e0:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | |||
| 0003b4f0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b500:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | |||
| 0003b510:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | |||
| 0003b520:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | |||
| 0003b530:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | |||
| 0003b540:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | |||
| 0003b550:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003b560:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | |||
| 0003b570:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | |||
| 0003b580:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | |||
| 0003b590:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | |||
| 0003b5a0:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | |||
| 0003b5b0:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | |||
| 0003b5c0:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | |||
| 0003b5d0:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | |||
| 0003b5e0:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | |||
| 0003b5f0:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | |||
| 0003b600:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | |||
| 0003b610:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b620:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | |||
| 0003b630:·2922·0a0a·2020·2020·0a20·2020·207a·7970··)"..····.····zyp | |||
| 0003b640:·7065·7220·696e·7374·616c·6c20·2d66·202d··per·install·-f·- | |||
| 0003b650:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | |||
| 0003b660:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | |||
| 0003b670:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b680:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b690:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b6a0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b6b0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b6c0:·743d·2223·6964·6d35·3034·3822·2074·6162··t="#idm5048"·tab | |||
| 0003b6d0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b6e0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b6f0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b700:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b710:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b720:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b | 0003b730:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003b43 | 0003b740:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003b750:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003b760:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003b770:·643d·2269·646d·3530·3438·223e·3c74·6162··d="idm5048"><tab | ||
| 0003b | 0003b780:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b | 0003b790:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b | 0003b7a0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b | 0003b7b0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b | 0003b7c0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b | 0003b7d0:·3a3c·2f74·683e·3c74·643e·6869·6768·3c2f··:</th><td>high</ | ||
| 0003b7e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b7f0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b800:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | |||
| 0003b | 0003b810:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b4e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b4f0:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 0003b500:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b | 0003b820:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b | 0003b830:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b840:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b54 | 0003b850:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | ||
| 0003b | 0003b860:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b | 0003b870:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003b570:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | |||
| 0003b580:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | |||
| 0003b590:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | |||
| 0003b5a0:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | |||
| 0003b5b0:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | |||
| 0003b5c0:·7374·616c·6c5f·636d·643a·207a·7970·7065··stall_cmd:·zyppe | |||
| 0003b5d0:·7220·7265·696e·7374·616c·6c20·2d79·0a20··r·reinstall·-y.· | |||
| 0003b5e0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f64···when:·ansible_d | |||
| 0003b5f0:·6973·7472·6962·7574·696f·6e20·696e·205b··istribution·in·[ | |||
| 0003b600:·2022·4665·646f·7261·222c·2022·5265·6448···"Fedora",·"RedH | |||
| 0003b610:·6174·222c·2022·4365·6e74·4f53·222c·2022··at",·"CentOS",·" | |||
| 0003b620:·4f72·6163·6c65·4c69·6e75·7822·205d·0a20··OracleLinux"·].· | |||
| 0003b630:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b640:·3136·3332·2d30·0a20·202d·2043·4a49·532d··1632-0.··-·CJIS- | |||
| 0003b650:·352e·3130·2e34·2e31·0a20·202d·204e·4953··5.10.4.1.··-·NIS | |||
| 0003b660:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | |||
| 0003b670:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003b680:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | |||
| 0003b690:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | |||
| 0003b6a0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b6b0:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | |||
| 0003b6c0:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | |||
| 0003b6d0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b6e0:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | |||
| 0003b6f0:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | |||
| 0003b700:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003b710:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | |||
| 0003b720:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b730:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b740:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | |||
| Max diff block lines reached; 16961416/17003422 bytes (99.75%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·for·SUSE·Linux·enterprise·12 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·for·SUSE·Linux·enterprise·12 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 124, 14 lines modified | Offset 124, 29 lines modified | ||
| 124 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 124 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 125 | ····························A.14.2.3,·A.14.2.4 | 125 | ····························A.14.2.3,·A.14.2.4 |
| 126 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 126 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 127 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 127 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 133 | get·files·names | ||
| 134 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 135 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 136 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 137 | new·line | ||
| 138 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 139 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 140 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 136 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 146 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 137 | ··set_fact: | 147 | ··set_fact: |
| Offset 263, 29 lines modified | Offset 278, 14 lines modified | ||
| 263 | ··-·PCI-DSSv4-11.5.2 | 278 | ··-·PCI-DSSv4-11.5.2 |
| 264 | ··-·high_complexity | 279 | ··-·high_complexity |
| 265 | ··-·high_severity | 280 | ··-·high_severity |
| 266 | ··-·medium_disruption | 281 | ··-·medium_disruption |
| 267 | ··-·no_reboot_needed | 282 | ··-·no_reboot_needed |
| 268 | ··-·restrict_strategy | 283 | ··-·restrict_strategy |
| 269 | ··-·rpm_verify_hashes | 284 | ··-·rpm_verify_hashes |
| 270 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 271 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 272 | get·files·names | ||
| 273 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 274 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 275 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 276 | new·line | ||
| 277 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 278 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 279 | fi | ||
| 280 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 285 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 281 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 286 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 282 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 287 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 283 | which·can·be·found·with: | 288 | which·can·be·found·with: |
| 284 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 289 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 285 | run·the·following·command·to·determine·which·package·owns·it: | 290 | run·the·following·command·to·determine·which·package·owns·it: |
| 286 | $·rpm·-qf·FILENAME | 291 | $·rpm·-qf·FILENAME |
| Offset 367, 14 lines modified | Offset 367, 46 lines modified | ||
| 367 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 367 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 368 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 368 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 369 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 369 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 370 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 370 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 371 | ····························SRG-OS-000278-GPOS-00108 | 371 | ····························SRG-OS-000278-GPOS-00108 |
| 372 | ·············_\x8c_\x8i_\x8s············6.1.1 | 372 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 373 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 373 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 379 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 380 | declare·-A·SETPERMS_RPM_DICT | ||
| 381 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 382 | #·is·expected·by·the·RPM·database | ||
| 383 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 384 | $NF·}') | ||
| 385 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 386 | do | ||
| 387 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 388 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 389 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 390 | ········do | ||
| 391 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 392 | duplicates. | ||
| 393 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 394 | ········done | ||
| 395 | done | ||
| 396 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 397 | #·correct·values | ||
| 398 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 399 | do | ||
| 400 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 401 | done | ||
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 403 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 404 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 405 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 406 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 379 | -·name:·Read·list·of·files·with·incorrect·permissions | 407 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 380 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 408 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 455, 46 lines modified | Offset 487, 14 lines modified | ||
| 455 | ··-·PCI-DSSv4-11.5.2 | 487 | ··-·PCI-DSSv4-11.5.2 |
| 456 | ··-·high_complexity | 488 | ··-·high_complexity |
| 457 | ··-·high_severity | 489 | ··-·high_severity |
| 458 | ··-·medium_disruption | 490 | ··-·medium_disruption |
| Max diff block lines reached; 1287054/1293257 bytes (99.52%) of diff not shown. | |||
| Offset 14304, 16 lines modified | Offset 14304, 16 lines modified | ||
| 00037df0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037df0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037e00:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037e00:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037e10:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037e10:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e20:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e20:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e30:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e30:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e40:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e40:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e60:·2020·2028·6173·206f·6620·3230·323 | 00037e60:·2020·2028·6173·206f·6620·3230·3235·2d31·····(as·of·2025-1 | ||
| 00037e70:·3 | 00037e70:·322d·3131·290a·2020·2020·2020·2020·2020··2-11).·········· | ||
| 00037e80:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e80:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e90:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e90:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037ea0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037ea0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037eb0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037eb0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037ec0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037ec0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037ed0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037ed0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ee0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ee0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 14954, 117 lines modified | Offset 14954, 117 lines modified | ||
| 0003a690:·6574·3d22·2369·646d·3234·3536·3022·2074··et="#idm24560"·t | 0003a690:·6574·3d22·2369·646d·3234·3536·3022·2074··et="#idm24560"·t | ||
| 0003a6a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003a6a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003a6b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003a6b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003a6c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003a6c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003a6d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003a6d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003a6e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003a6e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003a6f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003a6f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003a700:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003a710:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a720:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a730:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a700:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003a710:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a720:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a730:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a740:·2069·643d·2269·646d·3234·3536·3022·3e3c···id="idm24560">< | |||
| 0003a750:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003a760:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003a770:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003a780:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003a790:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003a7a0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003a7b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a7c0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003a7d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a7e0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003a7f0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003a800:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a810:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003a820:·3c74·643e·636f·6e66·6967·7572·653c·2f74··<td>configure</t | |||
| 0003a830:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003a840:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003a850:·3a20·5465·7374·2066·6f72·2065·7869·7374··:·Test·for·exist | |||
| 0003a860:·656e·6365·202f·6574·632f·7061·7373·7764··ence·/etc/passwd | |||
| 0003a870:·0a20·2073·7461·743a·0a20·2020·2070·6174··.··stat:.····pat | |||
| 0003a880:·683a·202f·6574·632f·7061·7373·7764·0a20··h:·/etc/passwd.· | |||
| 0003a890:·2072·6567·6973·7465·723a·2066·696c·655f···register:·file_ | |||
| 0003a8a0:·6578·6973·7473·0a20·2074·6167·733a·0a20··exists.··tags:.· | |||
| 0003a8b0:·202d·2043·4345·2d39·3136·3237·2d30·0a20···-·CCE-91627-0.· | |||
| 0003a8c0:·202d·2043·4a49·532d·352e·352e·322e·320a···-·CJIS-5.5.2.2. | |||
| 0003a8d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003a8e0:·4143·2d36·2831·290a·2020·2d20·4e49·5354··AC-6(1).··-·NIST | |||
| 0003a8f0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003a900:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003a910:·382e·372e·630a·2020·2d20·5043·492d·4453··8.7.c.··-·PCI-DS | |||
| 0003a920:·5376·342d·322e·322e·360a·2020·2d20·636f··Sv4-2.2.6.··-·co | |||
| 0003a930:·6e66·6967·7572·655f·7374·7261·7465·6779··nfigure_strategy | |||
| 0003a940:·0a20·202d·2066·696c·655f·6772·6f75·706f··.··-·file_groupo | |||
| 0003a950:·776e·6572·5f65·7463·5f70·6173·7377·640a··wner_etc_passwd. | |||
| 0003a960:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003a970:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003a980:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003a990:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003a9a0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a0a··_reboot_needed.. | |||
| 0003a9b0:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | |||
| 0003a9c0:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | |||
| 0003a9d0:·2f65·7463·2f70·6173·7377·640a·2020·6669··/etc/passwd.··fi | |||
| 0003a9e0:·6c65·3a0a·2020·2020·7061·7468·3a20·2f65··le:.····path:·/e | |||
| 0003a9f0:·7463·2f70·6173·7377·640a·2020·2020·6772··tc/passwd.····gr | |||
| 0003aa00:·6f75·703a·2027·3027·0a20·2077·6865·6e3a··oup:·'0'.··when: | |||
| 0003aa10:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | |||
| 0003aa20:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | |||
| 0003aa30:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | |||
| 0003aa40:·742e·6578·6973·7473·0a20·2074·6167·733a··t.exists.··tags: | |||
| 0003aa50:·0a20·202d·2043·4345·2d39·3136·3237·2d30··.··-·CCE-91627-0 | |||
| 0003aa60:·0a20·202d·2043·4a49·532d·352e·352e·322e··.··-·CJIS-5.5.2. | |||
| 0003aa70:·320a·2020·2d20·4e49·5354·2d38·3030·2d35··2.··-·NIST-800-5 | |||
| 0003aa80:·332d·4143·2d36·2831·290a·2020·2d20·4e49··3-AC-6(1).··-·NI | |||
| 0003aa90:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003aaa0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003aab0:·712d·382e·372e·630a·2020·2d20·5043·492d··q-8.7.c.··-·PCI- | |||
| 0003aac0:·4453·5376·342d·322e·322e·360a·2020·2d20··DSSv4-2.2.6.··-· | |||
| 0003aad0:·636f·6e66·6967·7572·655f·7374·7261·7465··configure_strate | |||
| 0003aae0:·6779·0a20·202d·2066·696c·655f·6772·6f75··gy.··-·file_grou | |||
| 0003aaf0:·706f·776e·6572·5f65·7463·5f70·6173·7377··powner_etc_passw | |||
| 0003ab00:·640a·2020·2d20·6c6f·775f·636f·6d70·6c65··d.··-·low_comple | |||
| 0003ab10:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003ab20:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003ab30:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003ab40:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003ab50:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ab60:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ab70:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ab80:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ab90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003a | 0003a740:·3d22·6964·6d32·3435·3630·223e·3c74·6162··="idm24560"><tab | ||
| 0003abb0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003abc0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003abd0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003abe0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003abf0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003ac00:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003a | 0003a750:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003a760:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a770:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a780:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a790:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a7a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a7b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a7c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a7d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a7e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a7f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a800:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a810:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003a820:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | |||
| 0003a830:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003a840:·3e3c·636f·6465·3e63·6867·7270·202d·4c20··><code>chgrp·-L· | |||
| 0003a850:·3020·2f65·7463·2f70·6173·7377·640a·3c2f··0·/etc/passwd.</ | |||
| 0003a860:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| Max diff block lines reached; 31382/47444 bytes (66.15%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·12 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·12 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 43 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 44 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 44 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Group ·Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12· Group | 52 | Group ·Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12· Group |
| 53 | contains·4·groups·and·3·rules | 53 | contains·4·groups·and·3·rules |
| 54 | Group ·System·Settings· Group·contains·3·groups·and·3·rules | 54 | Group ·System·Settings· Group·contains·3·groups·and·3·rules |
| Offset 107, 14 lines modified | Offset 107, 20 lines modified | ||
| 107 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 107 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 108 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 108 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 111 | ·············_\x8c_\x8i_\x8s············6.1.2 | 111 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 119 | chgrp·-L·0·/etc/passwd | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 119 | -·name:·Test·for·existence·/etc/passwd | 125 | -·name:·Test·for·existence·/etc/passwd |
| 120 | ··stat: | 126 | ··stat: |
| Offset 148, 20 lines modified | Offset 154, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-2.2.6 | 154 | ··-·PCI-DSSv4-2.2.6 |
| 149 | ··-·configure_strategy | 155 | ··-·configure_strategy |
| 150 | ··-·file_groupowner_etc_passwd | 156 | ··-·file_groupowner_etc_passwd |
| 151 | ··-·low_complexity | 157 | ··-·low_complexity |
| 152 | ··-·low_disruption | 158 | ··-·low_disruption |
| 153 | ··-·medium_severity | 159 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 160 | chgrp·-L·0·/etc/passwd | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: | 162 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: |
| 163 | $·sudo·chown·root·/etc/passwd | 163 | $·sudo·chown·root·/etc/passwd |
| 164 | ·············The·/etc/passwd·file·contains·information·about·the·users·that·are | 164 | ·············The·/etc/passwd·file·contains·information·about·the·users·that·are |
| 165 | Rationale:···configured·on·the·system.·Protection·of·this·file·is·critical·for | 165 | Rationale:···configured·on·the·system.·Protection·of·this·file·is·critical·for |
| 166 | ·············system·security. | 166 | ·············system·security. |
| 167 | Severity: ···medium | 167 | Severity: ···medium |
| Offset 184, 14 lines modified | Offset 184, 20 lines modified | ||
| 184 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 184 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 185 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 185 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 186 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 186 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 187 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 187 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 188 | ·············_\x8c_\x8i_\x8s············6.1.2 | 188 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 189 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 189 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 190 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 190 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 196 | chown·-L·0·/etc/passwd | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 196 | -·name:·Test·for·existence·/etc/passwd | 202 | -·name:·Test·for·existence·/etc/passwd |
| 197 | ··stat: | 203 | ··stat: |
| Offset 225, 20 lines modified | Offset 231, 14 lines modified | ||
| 225 | ··-·PCI-DSSv4-2.2.6 | 231 | ··-·PCI-DSSv4-2.2.6 |
| 226 | ··-·configure_strategy | 232 | ··-·configure_strategy |
| 227 | ··-·file_owner_etc_passwd | 233 | ··-·file_owner_etc_passwd |
| 228 | ··-·low_complexity | 234 | ··-·low_complexity |
| 229 | ··-·low_disruption | 235 | ··-·low_disruption |
| 230 | ··-·medium_severity | 236 | ··-·medium_severity |
| 231 | ··-·no_reboot_needed | 237 | ··-·no_reboot_needed |
| 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 233 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 234 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 235 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 236 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 237 | chown·-L·0·/etc/passwd | ||
| 238 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 238 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 239 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: | 239 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: |
| 240 | $·sudo·chmod·0644·/etc/passwd | 240 | $·sudo·chmod·0644·/etc/passwd |
| 241 | ·············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world | 241 | ·············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world |
| 242 | Rationale:···the·risk·of·its·compromise·is·increased.·The·file·contains·the | 242 | Rationale:···the·risk·of·its·compromise·is·increased.·The·file·contains·the |
| 243 | ·············list·of·accounts·on·the·system·and·associated·information,·and | 243 | ·············list·of·accounts·on·the·system·and·associated·information,·and |
| 244 | ·············protection·of·this·file·is·critical·for·system·security. | 244 | ·············protection·of·this·file·is·critical·for·system·security. |
| Offset 262, 14 lines modified | Offset 262, 25 lines modified | ||
| 262 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 262 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 263 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 263 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 264 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 264 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 265 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 265 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 266 | ·············_\x8c_\x8i_\x8s············6.1.2 | 266 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 267 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 267 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 268 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 268 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 269 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 270 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 271 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 272 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 273 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 274 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 269 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 270 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 271 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 272 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 273 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 274 | -·name:·Test·for·existence·/etc/passwd | 280 | -·name:·Test·for·existence·/etc/passwd |
| 275 | ··stat: | 281 | ··stat: |
| Offset 303, 22 lines modified | Offset 314, 11 lines modified | ||
| 303 | ··-·PCI-DSSv4-2.2.6 | 314 | ··-·PCI-DSSv4-2.2.6 |
| Max diff block lines reached; 675/6479 bytes (10.42%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037df0:·6173·206f·6620·3230·323 | 00037df0:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15145, 130 lines modified | Offset 15145, 130 lines modified | ||
| 0003b280:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b280:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b290:·743d·2223·6964·6d35·3339·3022·2074·6162··t="#idm5390"·tab | 0003b290:·743d·2223·6964·6d35·3339·3022·2074·6162··t="#idm5390"·tab | ||
| 0003b2a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b2a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b2b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b2b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b2c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b2c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b2d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b2d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b2e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b2e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b2f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b300:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b310:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b320:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b330:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b340:·643d·2269·646d·3533·3930·223e·3c74·6162··d="idm5390"><tab | |||
| 0003b350:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b360:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b370:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b380:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b390:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b3a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b3b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b3c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b3d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b3f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b400:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b410:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b420:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b430:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b440:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b450:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b460:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b470:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b480:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b490:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b4a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b4b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b4c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b4d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b4e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b4f0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b500:·3833·3036·372d·390a·2020·2d20·434a·4953··83067-9.··-·CJIS | |||
| 0003b510:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b520:·5341·2d53·5449·472d·534c·4553·2d31·322d··SA-STIG-SLES-12- | |||
| 0003b530:·3031·3034·3939·0a20·202d·204e·4953·542d··010499.··-·NIST- | |||
| 0003b540:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b550:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b560:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b570:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b580:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b590:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b5a0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b5b0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b5c0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b5d0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b5e0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b5f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b600:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b610:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b620:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b630:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b640:·2d74·6172·6765·743d·2223·6964·6d35·3339··-target="#idm539 | |||
| 0003b650:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003b660:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b670:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b680:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b690:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b6a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b6b0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b6c0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b6d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b6e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b6f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b700:·643d·2269·646d·3533·3931·223e·3c70·7265··d="idm5391"><pre | |||
| 0003b710:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b720:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b730:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b740:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b750:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b760:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b770:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b780:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b790:·743d·2223·6964·6d35·3339·3222·2074·6162··t="#idm5392"·tab | |||
| 0003b7a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b7b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b7c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b7d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b7e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b | 0003b2f0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003b | 0003b300:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 0003b | 0003b310:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b | 0003b320:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b | 0003b330:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b | 0003b340:·6964·6d35·3339·3022·3e3c·7461·626c·6520··idm5390"><table· | ||
| 0003b | 0003b350:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b | 0003b360:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b | 0003b370:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b | 0003b380:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b | 0003b390:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b | 0003b3a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b3b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b3c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b3d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b3e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b3f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b | 0003b400:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b410:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b | 0003b420:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b | 0003b430:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b | 0003b440:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003b | 0003b450:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 0003b | 0003b460:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| Max diff block lines reached; 19645991/19663709 bytes (99.91%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·12 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·12 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 126, 14 lines modified | Offset 126, 27 lines modified | ||
| 126 | include·install_aide | 126 | include·install_aide |
| 127 | class·install_aide·{ | 127 | class·install_aide·{ |
| 128 | ··package·{·'aide': | 128 | ··package·{·'aide': |
| 129 | ····ensure·=>·'installed', | 129 | ····ensure·=>·'installed', |
| 130 | ··} | 130 | ··} |
| 131 | } | 131 | } |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 139 | zypper·install·-y·"aide" | ||
| 140 | else | ||
| 141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 142 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 148 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 149 | ··package: |
| Offset 154, 27 lines modified | Offset 167, 14 lines modified | ||
| 154 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 157 | [[packages]] | 170 | [[packages]] |
| 158 | name·=·"aide" | 171 | name·=·"aide" |
| 159 | version·=·"*" | 172 | version·=·"*" |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 167 | zypper·install·-y·"aide" | ||
| 168 | else | ||
| 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 170 | fi | ||
| 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 173 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 172 | Run·the·following·command·to·generate·a·new·database: | 174 | Run·the·following·command·to·generate·a·new·database: |
| 173 | $·sudo·/usr/bin/aide·--init | 175 | $·sudo·/usr/bin/aide·--init |
| 174 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 176 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 175 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 177 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 176 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 178 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 177 | generated·database·can·be·installed·as·follows: | 179 | generated·database·can·be·installed·as·follows: |
| Offset 201, 14 lines modified | Offset 201, 29 lines modified | ||
| 201 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 201 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 202 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 202 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 203 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 203 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 204 | ·············_\x8c_\x8i_\x8s············1.4.1 | 204 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 205 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 205 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 206 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 206 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 207 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 207 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 209 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 210 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 211 | zypper·-q·--no-remote·ref | ||
| 212 | zypper·install·-y·"aide" | ||
| 213 | /usr/bin/aide·--init | ||
| 214 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 215 | else | ||
| 216 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 217 | fi | ||
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 211 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 212 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 213 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated | 223 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated |
| 214 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref | 224 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref |
| Offset 304, 29 lines modified | Offset 319, 14 lines modified | ||
| 304 | ··-·PCI-DSSv4-11.5.2 | 319 | ··-·PCI-DSSv4-11.5.2 |
| 305 | ··-·aide_build_database | 320 | ··-·aide_build_database |
| 306 | ··-·low_complexity | 321 | ··-·low_complexity |
| 307 | ··-·low_disruption | 322 | ··-·low_disruption |
| 308 | ··-·medium_severity | 323 | ··-·medium_severity |
| 309 | ··-·no_reboot_needed | 324 | ··-·no_reboot_needed |
| 310 | ··-·restrict_strategy | 325 | ··-·restrict_strategy |
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 312 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 313 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 314 | zypper·-q·--no-remote·ref | ||
| 315 | zypper·install·-y·"aide" | ||
| 316 | /usr/bin/aide·--init | ||
| 317 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 318 | else | ||
| 319 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 320 | fi | ||
| 321 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 326 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 322 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 327 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 323 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward | 328 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward |
| Max diff block lines reached; 1447541/1453031 bytes (99.62%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380d0:·7320·6f66·2032·3032·3 | 000380d0:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15172, 129 lines modified | Offset 15172, 129 lines modified | ||
| 0003b430:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b430:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b440:·6d36·3333·3322·2074·6162·696e·6465·783d··m6333"·tabindex= | 0003b440:·6d36·3333·3322·2074·6162·696e·6465·783d··m6333"·tabindex= | ||
| 0003b450:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b450:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b460:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b460:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b470:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b470:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b480:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b480:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b490:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b490:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b4a0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b4b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b4c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b4d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b4e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b4f0:·3633·3333·223e·3c74·6162·6c65·2063·6c61··6333"><table·cla | |||
| 0003b500:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b510:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b520:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b530:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b540:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b550:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b560:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b570:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b580:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b590:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b5a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b5b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b5c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b5d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b5e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b5f0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b600:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b610:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b620:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b630:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b640:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b650:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b660:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b670:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b680:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b690:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b6a0:·3a0a·2020·2d20·4343·452d·3833·3238·392d··:.··-·CCE-83289- | |||
| 0003b6b0:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b6c0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b6d0:·472d·534c·4553·2d31·352d·3031·3034·3139··G-SLES-15-010419 | |||
| 0003b6e0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b6f0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b700:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b710:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b720:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b730:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b740:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b750:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b760:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b770:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b780:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b790:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b7a0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b7b0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b7c0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b7d0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b7e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b7f0:·743d·2223·6964·6d36·3333·3422·2074·6162··t="#idm6334"·tab | |||
| 0003b800:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b810:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b820:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b830:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b840:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b850:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b860:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b870:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b880:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b890:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b8a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b8b0:·3633·3334·223e·3c70·7265·3e3c·636f·6465··6334"><pre><code | |||
| 0003b8c0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b8d0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b8e0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b8f0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b900:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b910:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b920:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b930:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b940:·6d36·3333·3522·2074·6162·696e·6465·783d··m6335"·tabindex= | |||
| 0003b950:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b960:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b970:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b980:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b990:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003b4a0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b | 0003b4b0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b | 0003b4c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003b4d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003b4e0:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | ||
| 0003b | 0003b4f0:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | ||
| 0003b | 0003b500:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b | 0003b510:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b | 0003b520:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b | 0003b530:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b | 0003b540:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b | 0003b550:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b | 0003b560:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b | 0003b570:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b580:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b | 0003b590:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b | 0003b5a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b | 0003b5b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b | 0003b5c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003b | 0003b5d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b | 0003b5e0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003b | 0003b5f0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003b | 0003b600:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 0003b | 0003b610:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| Max diff block lines reached; 20005021/20022601 bytes (99.91%) of diff not shown. | |||
| Offset 14342, 15 lines modified | Offset 14342, 15 lines modified | ||
| 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380c0:·7320·6f66·2032·3032·3 | 000380c0:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15177, 130 lines modified | Offset 15177, 130 lines modified | ||
| 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b490:·2369·646d·3633·3333·2220·7461·6269·6e64··#idm6333"·tabind | 0003b490:·2369·646d·3633·3333·2220·7461·6269·6e64··#idm6333"·tabind | ||
| 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4f0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b500:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b510:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b520:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b530:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b540:·6964·6d36·3333·3322·3e3c·7461·626c·6520··idm6333"><table· | |||
| 0003b550:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b560:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b570:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b580:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b590:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b5a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b5c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b5d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b5e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b5f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b600:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b610:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b620:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b630:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b640:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b650:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b660:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b670:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b680:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b690:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b6a0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b6b0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b6c0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b6d0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b6e0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b6f0:·6167·733a·0a20·202d·2043·4345·2d38·3332··ags:.··-·CCE-832 | |||
| 0003b700:·3839·2d39·0a20·202d·2043·4a49·532d·352e··89-9.··-·CJIS-5. | |||
| 0003b710:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b720:·5354·4947·2d53·4c45·532d·3135·2d30·3130··STIG-SLES-15-010 | |||
| 0003b730:·3431·390a·2020·2d20·4e49·5354·2d38·3030··419.··-·NIST-800 | |||
| 0003b740:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b750:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b760:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b770:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b780:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b790:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b7a0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b7b0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b7c0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b7d0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b7e0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b7f0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b800:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b810:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b820:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b830:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b840:·7267·6574·3d22·2369·646d·3633·3334·2220··rget="#idm6334"· | |||
| 0003b850:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b860:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b870:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b880:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b890:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b8a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b8b0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b8c0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b8d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b8e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b8f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b900:·6964·6d36·3333·3422·3e3c·7072·653e·3c63··idm6334"><pre><c | |||
| 0003b910:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b920:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b930:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b940:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b950:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b960:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b970:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b980:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b990:·2369·646d·3633·3335·2220·7461·6269·6e64··#idm6335"·tabind | |||
| 0003b9a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b9b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b9c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b9d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b9e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b | 0003b4f0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b | 0003b500:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003b | 0003b510:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003b520:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003b530:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003b540:·3633·3333·223e·3c74·6162·6c65·2063·6c61··6333"><table·cla | ||
| 0003b | 0003b550:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003b560:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003b570:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003b580:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003b590:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003b5a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003b5b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b | 0003b5c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b5d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b5e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b | 0003b5f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b | 0003b600:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b | 0003b610:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003b | 0003b620:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003b | 0003b630:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 0003b | 0003b640:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003b | 0003b650:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003b | 0003b660:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| Max diff block lines reached; 20300764/20318482 bytes (99.91%) of diff not shown. | |||
| Offset 14344, 15 lines modified | Offset 14344, 15 lines modified | ||
| 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380e0:·7320·6f66·2032·3032·3 | 000380e0:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15163, 129 lines modified | Offset 15163, 129 lines modified | ||
| 0003b3a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b3a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b3b0:·646d·3633·3333·2220·7461·6269·6e64·6578··dm6333"·tabindex | 0003b3b0:·646d·3633·3333·2220·7461·6269·6e64·6578··dm6333"·tabindex | ||
| 0003b3c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b3c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b3d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b3d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b3e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b3e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b3f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b3f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b400:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b400:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b410:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b420:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b430:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b440:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b450:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b460:·6d36·3333·3322·3e3c·7461·626c·6520·636c··m6333"><table·cl | |||
| 0003b470:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b480:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b490:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b4a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b4b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b4c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b4d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b4e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b4f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b500:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b510:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b520:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b530:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b540:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b550:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b560:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b570:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b580:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b590:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b5a0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b5b0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b5c0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b5d0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b5e0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b5f0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b600:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b610:·733a·0a20·202d·2043·4345·2d38·3332·3839··s:.··-·CCE-83289 | |||
| 0003b620:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b630:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b640:·4947·2d53·4c45·532d·3135·2d30·3130·3431··IG-SLES-15-01041 | |||
| 0003b650:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b660:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b670:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b680:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b690:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b6a0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b6b0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b6c0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b6d0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b6e0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b6f0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b700:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b710:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b720:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b730:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b740:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b750:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b760:·6574·3d22·2369·646d·3633·3334·2220·7461··et="#idm6334"·ta | |||
| 0003b770:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b780:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b790:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b7a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b7b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b7c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b7d0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b7e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b7f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b800:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b810:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b820:·6d36·3333·3422·3e3c·7072·653e·3c63·6f64··m6334"><pre><cod | |||
| 0003b830:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b840:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b850:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b860:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b870:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b880:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b890:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b8b0:·646d·3633·3335·2220·7461·6269·6e64·6578··dm6335"·tabindex | |||
| 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b | 0003b410:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 0003b | 0003b420:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003b | 0003b430:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b | 0003b440:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b | 0003b450:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | ||
| 0003b | 0003b460:·3333·223e·3c74·6162·6c65·2063·6c61·7373··33"><table·class | ||
| 0003b | 0003b470:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b | 0003b480:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b | 0003b490:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b | 0003b4a0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b | 0003b4b0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b | 0003b4c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b | 0003b4d0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b | 0003b4e0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003b4f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b500:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b | 0003b510:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b | 0003b520:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b | 0003b530:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003b | 0003b540:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b | 0003b550:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003b | 0003b560:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003b | 0003b570:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003b | 0003b580:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| Max diff block lines reached; 7678565/7696145 bytes (99.77%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 134, 14 lines modified | Offset 134, 27 lines modified | ||
| 134 | include·install_aide | 134 | include·install_aide |
| 135 | class·install_aide·{ | 135 | class·install_aide·{ |
| 136 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 137 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 138 | ··} | 138 | ··} |
| 139 | } | 139 | } |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 147 | zypper·install·-y·"aide" | ||
| 148 | else | ||
| 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 150 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Ensure·aide·is·installed | 156 | -·name:·Ensure·aide·is·installed |
| 146 | ··package: | 157 | ··package: |
| Offset 162, 27 lines modified | Offset 175, 14 lines modified | ||
| 162 | ··-·no_reboot_needed | 175 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 176 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | [[packages]] | 178 | [[packages]] |
| 166 | name·=·"aide" | 179 | name·=·"aide" |
| 167 | version·=·"*" | 180 | version·=·"*" |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 175 | zypper·install·-y·"aide" | ||
| 176 | else | ||
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 178 | fi | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/bin/aide·--init | 183 | $·sudo·/usr/bin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 29 lines modified | ||
| 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 212 | ·············_\x8c_\x8i_\x8s············1.4.1 | 212 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 219 | zypper·-q·--no-remote·ref | ||
| 220 | zypper·install·-y·"aide" | ||
| 221 | /usr/bin/aide·--init | ||
| 222 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 223 | else | ||
| 224 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 225 | fi | ||
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 217 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 218 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 219 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 220 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 221 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated | 231 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated |
| 222 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref | 232 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref |
| Offset 312, 29 lines modified | Offset 327, 14 lines modified | ||
| 312 | ··-·PCI-DSSv4-11.5.2 | 327 | ··-·PCI-DSSv4-11.5.2 |
| 313 | ··-·aide_build_database | 328 | ··-·aide_build_database |
| 314 | ··-·low_complexity | 329 | ··-·low_complexity |
| 315 | ··-·low_disruption | 330 | ··-·low_disruption |
| 316 | ··-·medium_severity | 331 | ··-·medium_severity |
| 317 | ··-·no_reboot_needed | 332 | ··-·no_reboot_needed |
| 318 | ··-·restrict_strategy | 333 | ··-·restrict_strategy |
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 320 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 321 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 322 | zypper·-q·--no-remote·ref | ||
| 323 | zypper·install·-y·"aide" | ||
| 324 | /usr/bin/aide·--init | ||
| 325 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 326 | else | ||
| 327 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 328 | fi | ||
| 329 | Group ·Disk·Partitioning· Group·contains·9·rules | 334 | Group ·Disk·Partitioning· Group·contains·9·rules |
| 330 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which | 335 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which |
| 331 | should·be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default | 336 | should·be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default |
| Max diff block lines reached; 904886/910325 bytes (99.40%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 000380d0:·2032·3032·3 | 000380d0:·2032·3032·352d·3132·2d31·3129·0a20·2020···2025-12-11).··· | ||
| 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14833, 106 lines modified | Offset 14833, 106 lines modified | ||
| 00039f00:·2d74·6172·6765·743d·2223·6964·6d38·3839··-target="#idm889 | 00039f00:·2d74·6172·6765·743d·2223·6964·6d38·3839··-target="#idm889 | ||
| 00039f10:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 00039f10:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 00039f20:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00039f20:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039f30:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00039f30:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039f40:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00039f40:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039f50:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00039f50:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039f60:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00039f60:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039f70:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 00039f80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039f90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039fa0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039fb0:·2220·6964·3d22·6964·6d38·3839·3222·3e3c··"·id="idm8892">< | |||
| 00039fc0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00039fd0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00039fe0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00039ff0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003a000:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00039f70:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00039f80:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00039f90:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039fa0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039fb0:·7073·6522·2069·643d·2269·646d·3838·3932··pse"·id="idm8892 | |||
| 00039fc0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039fd0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039fe0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039ff0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003a000:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003a010:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003a020:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003a030:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003a0 | 0003a010:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003a0 | 0003a020:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003a030:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003a040:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a050:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003a060:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003a070:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a080:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003a090:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003a0a0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003a0b0:·3e3c·636f·6465·3e0a·7a79·7070·6572·2069··><code>.zypper·i | |||
| 0003a0c0:·6e73·7461·6c6c·202d·7920·2264·6e66·2d61··nstall·-y·"dnf-a | |||
| 0003a0d0:·7574·6f6d·6174·6963·220a·3c2f·636f·6465··utomatic".</code | |||
| 0003a0e0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003a0f0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003a100:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003a110:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003a120:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003a130:·3838·3933·2220·7461·6269·6e64·6578·3d22··8893"·tabindex=" | |||
| 0003a140:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003a150:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003a160:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003a170:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003a180:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003a190:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003a1a0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003a1b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a1c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a1d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003a1e0:·3839·3322·3e3c·7461·626c·6520·636c·6173··893"><table·clas | |||
| 0003a1f0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003a200:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003a210:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003a220:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a230:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003a240:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a250:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a | 0003a260:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003a | 0003a270:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003a280:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003a290:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003a2a0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003a2b0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003a2c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003a2d0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003a2e0:·616d·653a·2045·6e73·7572·6520·646e·662d··ame:·Ensure·dnf- | |||
| 0003a2f0:·6175·746f·6d61·7469·6320·6973·2069·6e73··automatic·is·ins | |||
| 0003a080:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003a090:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003a0a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003a0b0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003a0c0:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 0003a0d0:·6f6d·6174·6963·2069·7320·696e·7374·616c··omatic·is·instal | |||
| 0003a0e0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003a0f0:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 0003a100:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 0003a110:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 0003a120:·3a0a·2020·2d20·4343·452d·3931·3136·332d··:.··-·CCE-91163- | |||
| 0003a130:·360a·2020·2d20·656e·6162·6c65·5f73·7472··6.··-·enable_str | |||
| 0003a140:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003a150:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003a160:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003a170:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003a180:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003a | 0003a300:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | ||
| 0003a310:·3a0a·2020·2020·6e61·6d65·3a20·646e·662d··:.····name:·dnf- | |||
| 0003a320:·6175·746f·6d61·7469·630a·2020·2020·7374··automatic.····st | |||
| 0003a330:·6174·653a·2070·7265·7365·6e74·0a20·2074··ate:·present.··t | |||
| 0003a340:·6167·733a·0a20·202d·2043·4345·2d39·3131··ags:.··-·CCE-911 | |||
| 0003a350:·3633·2d36·0a20·202d·2065·6e61·626c·655f··63-6.··-·enable_ | |||
| 0003a360:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003a370:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003a380:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003a390:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003a3a0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003a3b0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003a3c0:·6167·655f·646e·662d·6175·746f·6d61·7469··age_dnf-automati | |||
| 0003a3d0:·635f·696e·7374·616c·6c65·640a·3c2f·636f··c_installed.</co | |||
| 0003a1a0:·5f64·6e66·2d61·7574·6f6d·6174·6963·5f69··_dnf-automatic_i | |||
| 0003a1b0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003a1c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| Max diff block lines reached; 1952990/1967396 bytes (99.27%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 99, 14 lines modified | Offset 99, 21 lines modified | ||
| 99 | include·install_dnf-automatic | 99 | include·install_dnf-automatic |
| 100 | class·install_dnf-automatic·{ | 100 | class·install_dnf-automatic·{ |
| 101 | ··package·{·'dnf-automatic': | 101 | ··package·{·'dnf-automatic': |
| 102 | ····ensure·=>·'installed', | 102 | ····ensure·=>·'installed', |
| 103 | ··} | 103 | ··} |
| 104 | } | 104 | } |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 110 | zypper·install·-y·"dnf-automatic" | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 110 | -·name:·Ensure·dnf-automatic·is·installed | 116 | -·name:·Ensure·dnf-automatic·is·installed |
| 111 | ··package: | 117 | ··package: |
| Offset 121, 21 lines modified | Offset 128, 14 lines modified | ||
| 121 | ··-·no_reboot_needed | 128 | ··-·no_reboot_needed |
| 122 | ··-·package_dnf-automatic_installed | 129 | ··-·package_dnf-automatic_installed |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | [[packages]] | 131 | [[packages]] |
| 125 | name·=·"dnf-automatic" | 132 | name·=·"dnf-automatic" |
| 126 | version·=·"*" | 133 | version·=·"*" |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | zypper·install·-y·"dnf-automatic" | ||
| 133 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 134 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 135 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 136 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 136 | automatic.conf. | 137 | automatic.conf. |
| 137 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 138 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 138 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 139 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 139 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 140 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 146, 37 lines modified | Offset 146, 14 lines modified | ||
| 146 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 146 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 147 | Identifiers:·CCE-91165-1 | 147 | Identifiers:·CCE-91165-1 |
| 148 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 148 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 149 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 149 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 150 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 150 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 151 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 151 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 152 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 152 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 158 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 159 | ··ini_file: | ||
| 160 | ····dest:·/etc/dnf/automatic.conf | ||
| 161 | ····section:·commands | ||
| 162 | ····option:·apply_updates | ||
| 163 | ····value:·'yes' | ||
| 164 | ····create:·true | ||
| 165 | ··tags: | ||
| 166 | ··-·CCE-91165-1 | ||
| 167 | ··-·NIST-800-53-CM-6(a) | ||
| 168 | ··-·NIST-800-53-SI-2(5) | ||
| 169 | ··-·NIST-800-53-SI-2(c) | ||
| 170 | ··-·dnf-automatic_apply_updates | ||
| 171 | ··-·low_complexity | ||
| 172 | ··-·medium_disruption | ||
| 173 | ··-·medium_severity | ||
| 174 | ··-·no_reboot_needed | ||
| 175 | ··-·unknown_strategy | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 177 | found=false | 154 | found=false |
| 178 | #·set·value·in·all·files·if·they·contain·section·or·key | 155 | #·set·value·in·all·files·if·they·contain·section·or·key |
| 179 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | 156 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do |
| 180 | ····if·[·!·-e·"$f"·];·then | 157 | ····if·[·!·-e·"$f"·];·then |
| Offset 205, 50 lines modified | Offset 182, 50 lines modified | ||
| 205 | if·!·$found·;·then | 182 | if·!·$found·;·then |
| 206 | ····file=$(echo·"/etc/dnf/automatic.conf"·|·cut·-f1·-d·'·') | 183 | ····file=$(echo·"/etc/dnf/automatic.conf"·|·cut·-f1·-d·'·') |
| 207 | ····mkdir·-p·"$(dirname·"$file")" | 184 | ····mkdir·-p·"$(dirname·"$file")" |
| 208 | ····echo·-e·"[commands]\napply_updates=yes"·>>·"$file" | 185 | ····echo·-e·"[commands]\napply_updates=yes"·>>·"$file" |
| 209 | fi | 186 | fi |
| 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 211 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set | ||
| 212 | upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. | ||
| 213 | ·············By·default,·dnf-automatic·installs·all·available·updates.·Reducing·the·amount | ||
| 214 | Rationale:···of·updated·packages·only·to·updates·that·were·issued·as·a·part·of·a·security | ||
| 215 | ·············advisory·increases·the·system·stability. | ||
| 216 | Severity: ···low | ||
| 217 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_security_updates_only | ||
| 218 | Identifiers:·CCE-91166-9 | ||
| 219 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | ||
| 220 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | ||
| 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | ||
| 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | ||
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown |
| 228 | -·name:·Configure·dnf-automatic·to·Install· | 192 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically |
| 229 | ··ini_file: | 193 | ··ini_file: |
| 230 | ····dest:·/etc/dnf/automatic.conf | 194 | ····dest:·/etc/dnf/automatic.conf |
| 231 | ····section:·commands | 195 | ····section:·commands |
| Max diff block lines reached; 141346/147338 bytes (95.93%) of diff not shown. | |||
| Offset 14312, 15 lines modified | Offset 14312, 15 lines modified | ||
| 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037ee0:·323 | 00037ee0:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15209, 129 lines modified | Offset 15209, 129 lines modified | ||
| 0003b680:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b680:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b690:·6964·6d36·3333·3322·2074·6162·696e·6465··idm6333"·tabinde | 0003b690:·6964·6d36·3333·3322·2074·6162·696e·6465··idm6333"·tabinde | ||
| 0003b6a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b6a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b6b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b6b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b6c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b6c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b6d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b6d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b6e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b6e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b6f0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b700:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b710:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b720:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b730:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b740:·646d·3633·3333·223e·3c74·6162·6c65·2063··dm6333"><table·c | |||
| 0003b750:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b760:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b770:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b780:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b790:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b7a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b7b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b7c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b7d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b7e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b7f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b800:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b810:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b820:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b830:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b840:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b850:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b860:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b870:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b880:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b890:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b8a0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b8b0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b8c0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b8d0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b8e0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b8f0:·6773·3a0a·2020·2d20·4343·452d·3833·3238··gs:.··-·CCE-8328 | |||
| 0003b900:·392d·390a·2020·2d20·434a·4953·2d35·2e31··9-9.··-·CJIS-5.1 | |||
| 0003b910:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b920:·5449·472d·534c·4553·2d31·352d·3031·3034··TIG-SLES-15-0104 | |||
| 0003b930:·3139·0a20·202d·204e·4953·542d·3830·302d··19.··-·NIST-800- | |||
| 0003b940:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b950:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b960:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b970:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b980:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b990:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b9a0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b9b0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b9c0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b9d0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b9e0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b9f0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003ba00:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003ba10:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003ba20:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ba30:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ba40:·6765·743d·2223·6964·6d36·3333·3422·2074··get="#idm6334"·t | |||
| 0003ba50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ba60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ba70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ba80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ba90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003baa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003bab0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003bac0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003bad0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bae0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003baf0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bb00:·646d·3633·3334·223e·3c70·7265·3e3c·636f··dm6334"><pre><co | |||
| 0003bb10:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003bb20:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003bb30:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003bb40:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003bb50:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bb60:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bb70:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bb80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bb90:·6964·6d36·3333·3522·2074·6162·696e·6465··idm6335"·tabinde | |||
| 0003bba0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bbb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bbc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bbd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bbe0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b | 0003b6f0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003b | 0003b700:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b | 0003b710:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b720:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b730:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | ||
| 0003b | 0003b740:·3333·3322·3e3c·7461·626c·6520·636c·6173··333"><table·clas | ||
| 0003b | 0003b750:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b760:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b770:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b780:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b790:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b7a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b7b0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003b7c0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b7d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b7e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003b7f0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003b800:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003b810:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b | 0003b820:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b | 0003b830:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 0003b | 0003b840:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003b | 0003b850:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 0003b | 0003b860:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| Max diff block lines reached; 19384579/19402159 bytes (99.91%) of diff not shown. | |||
| Offset 14312, 16 lines modified | Offset 14312, 16 lines modified | ||
| 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·2028·6173·206f·6620·3230·323 | 00037ee0:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00037ef0:·3 | 00037ef0:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15187, 130 lines modified | Offset 15187, 130 lines modified | ||
| 0003b520:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b520:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b530:·3d22·2369·646d·3633·3333·2220·7461·6269··="#idm6333"·tabi | 0003b530:·3d22·2369·646d·3633·3333·2220·7461·6269··="#idm6333"·tabi | ||
| 0003b540:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b540:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b550:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b550:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b560:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b560:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b570:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b570:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b580:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b580:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b590:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b5a0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b5b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b5c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b5d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b5e0:·3d22·6964·6d36·3333·3322·3e3c·7461·626c··="idm6333"><tabl | |||
| 0003b5f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b600:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b610:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b620:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b630:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b640:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b650:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b660:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b670:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b680:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b690:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b6a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b6b0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b6c0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b6d0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b6e0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b6f0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b700:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b710:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b720:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b730:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b740:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b750:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b760:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b770:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b780:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b790:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003b7a0:·3332·3839·2d39·0a20·202d·2043·4a49·532d··3289-9.··-·CJIS- | |||
| 0003b7b0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b7c0:·412d·5354·4947·2d53·4c45·532d·3135·2d30··A-STIG-SLES-15-0 | |||
| 0003b7d0:·3130·3431·390a·2020·2d20·4e49·5354·2d38··10419.··-·NIST-8 | |||
| 0003b7e0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b7f0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b800:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b810:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b820:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b830:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b840:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b850:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b860:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b870:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b880:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b890:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b8a0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b8b0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b8c0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b8d0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b8e0:·7461·7267·6574·3d22·2369·646d·3633·3334··target="#idm6334 | |||
| 0003b8f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b900:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b910:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b920:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b930:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b940:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b950:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b960:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b970:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b980:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b990:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b9a0:·3d22·6964·6d36·3333·3422·3e3c·7072·653e··="idm6334"><pre> | |||
| 0003b9b0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b9c0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b9d0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b9e0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b9f0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ba00:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ba10:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ba20:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ba30:·3d22·2369·646d·3633·3335·2220·7461·6269··="#idm6335"·tabi | |||
| 0003ba40:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ba50:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ba60:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003ba70:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ba80:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b | 0003b590:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003b | 0003b5a0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003b | 0003b5b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b5c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b | 0003b5d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b5e0:·646d·3633·3333·223e·3c74·6162·6c65·2063··dm6333"><table·c | ||
| 0003b | 0003b5f0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b | 0003b600:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b | 0003b610:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b | 0003b620:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b | 0003b630:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b | 0003b640:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b650:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003b660:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b670:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b680:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b | 0003b690:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b | 0003b6a0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003b6b0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b | 0003b6c0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b | 0003b6d0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b | 0003b6e0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 0003b | 0003b6f0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| Max diff block lines reached; 8272771/8290627 bytes (99.78%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 137, 14 lines modified | Offset 137, 27 lines modified | ||
| 137 | include·install_aide | 137 | include·install_aide |
| 138 | class·install_aide·{ | 138 | class·install_aide·{ |
| 139 | ··package·{·'aide': | 139 | ··package·{·'aide': |
| 140 | ····ensure·=>·'installed', | 140 | ····ensure·=>·'installed', |
| 141 | ··} | 141 | ··} |
| 142 | } | 142 | } |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 150 | zypper·install·-y·"aide" | ||
| 151 | else | ||
| 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 153 | fi | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | -·name:·Ensure·aide·is·installed | 159 | -·name:·Ensure·aide·is·installed |
| 149 | ··package: | 160 | ··package: |
| Offset 165, 27 lines modified | Offset 178, 14 lines modified | ||
| 165 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 166 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | [[packages]] | 181 | [[packages]] |
| 169 | name·=·"aide" | 182 | name·=·"aide" |
| 170 | version·=·"*" | 183 | version·=·"*" |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 178 | zypper·install·-y·"aide" | ||
| 179 | else | ||
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 181 | fi | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | Run·the·following·command·to·generate·a·new·database: | 185 | Run·the·following·command·to·generate·a·new·database: |
| 184 | $·sudo·/usr/bin/aide·--init | 186 | $·sudo·/usr/bin/aide·--init |
| 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 187 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 186 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 188 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 187 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 189 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 188 | generated·database·can·be·installed·as·follows: | 190 | generated·database·can·be·installed·as·follows: |
| Offset 212, 14 lines modified | Offset 212, 29 lines modified | ||
| 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 215 | ·············_\x8c_\x8i_\x8s············1.4.1 | 215 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 218 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 218 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 220 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 221 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 222 | zypper·-q·--no-remote·ref | ||
| 223 | zypper·install·-y·"aide" | ||
| 224 | /usr/bin/aide·--init | ||
| 225 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 226 | else | ||
| 227 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 228 | fi | ||
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 224 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated | 234 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated |
| 225 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref | 235 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref |
| Offset 315, 29 lines modified | Offset 330, 14 lines modified | ||
| 315 | ··-·PCI-DSSv4-11.5.2 | 330 | ··-·PCI-DSSv4-11.5.2 |
| 316 | ··-·aide_build_database | 331 | ··-·aide_build_database |
| 317 | ··-·low_complexity | 332 | ··-·low_complexity |
| 318 | ··-·low_disruption | 333 | ··-·low_disruption |
| 319 | ··-·medium_severity | 334 | ··-·medium_severity |
| 320 | ··-·no_reboot_needed | 335 | ··-·no_reboot_needed |
| 321 | ··-·restrict_strategy | 336 | ··-·restrict_strategy |
| 322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 323 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 324 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 325 | zypper·-q·--no-remote·ref | ||
| 326 | zypper·install·-y·"aide" | ||
| 327 | /usr/bin/aide·--init | ||
| 328 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 329 | else | ||
| 330 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 331 | fi | ||
| 332 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8md\x8d·T\x8Ti\x8im\x8me\x8er\x8r·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 337 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8md\x8d·T\x8Ti\x8im\x8me\x8er\x8r·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 333 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·systemd·service·and·a·timer | 338 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·systemd·service·and·a·timer |
| 334 | unit·to·run·the·service·periodically:·For·example,·if·a·systemd·timer·is·expected·to·be·started·every·day | 339 | unit·to·run·the·service·periodically:·For·example,·if·a·systemd·timer·is·expected·to·be·started·every·day |
| Max diff block lines reached; 1016450/1021876 bytes (99.47%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037f00:·2d31·3 | 00037f00:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15174, 129 lines modified | Offset 15174, 129 lines modified | ||
| 0003b450:·6574·3d22·2369·646d·3633·3333·2220·7461··et="#idm6333"·ta | 0003b450:·6574·3d22·2369·646d·3633·3333·2220·7461··et="#idm6333"·ta | ||
| 0003b460:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b460:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b470:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b470:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b480:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b480:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b490:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b490:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b4a0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b4a0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b4b0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b4b0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b4c0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b4d0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4e0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4f0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b500:·6964·3d22·6964·6d36·3333·3322·3e3c·7461··id="idm6333"><ta | |||
| 0003b510:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b520:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b530:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b540:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b550:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b560:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b570:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b580:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b590:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b5a0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b5b0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b5c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b5d0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b5e0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b5f0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b600:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b610:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b620:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b630:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b640:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b650:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b660:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b670:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b680:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b690:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b6a0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b6b0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b6c0:·2d38·3332·3839·2d39·0a20·202d·2043·4a49··-83289-9.··-·CJI | |||
| 0003b6d0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b6e0:·4953·412d·5354·4947·2d53·4c45·532d·3135··ISA-STIG-SLES-15 | |||
| 0003b6f0:·2d30·3130·3431·390a·2020·2d20·4e49·5354··-010419.··-·NIST | |||
| 0003b700:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b710:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b720:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b730:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b740:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b750:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b760:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b770:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b780:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b790:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b7a0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b7b0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b7c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b7d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b7e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b7f0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b800:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | |||
| 0003b810:·3334·2220·7461·6269·6e64·6578·3d22·3022··34"·tabindex="0" | |||
| 0003b820:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b830:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b840:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b850:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b860:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b870:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b880:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b890:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b8a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b8b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b8c0:·6964·3d22·6964·6d36·3333·3422·3e3c·7072··id="idm6334"><pr | |||
| 0003b8d0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b8e0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b8f0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b900:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b910:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b920:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b930:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b940:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b950:·6574·3d22·2369·646d·3633·3335·2220·7461··et="#idm6335"·ta | |||
| 0003b960:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b970:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b980:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b990:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b9a0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b9b0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b | 0003b4c0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b | 0003b4d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003b4e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003b4f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003b500:·2269·646d·3633·3333·223e·3c74·6162·6c65··"idm6333"><table | ||
| 0003b | 0003b510:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b520:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b530:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b540:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b550:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b560:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b570:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003b580:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b590:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b | 0003b5a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003b5b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003b5c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b5d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b | 0003b5e0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003b | 0003b5f0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b | 0003b600:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b | 0003b610:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b | 0003b620:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| Max diff block lines reached; 8044527/8062245 bytes (99.78%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 134, 14 lines modified | Offset 134, 27 lines modified | ||
| 134 | include·install_aide | 134 | include·install_aide |
| 135 | class·install_aide·{ | 135 | class·install_aide·{ |
| 136 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 137 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 138 | ··} | 138 | ··} |
| 139 | } | 139 | } |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 147 | zypper·install·-y·"aide" | ||
| 148 | else | ||
| 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 150 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Ensure·aide·is·installed | 156 | -·name:·Ensure·aide·is·installed |
| 146 | ··package: | 157 | ··package: |
| Offset 162, 27 lines modified | Offset 175, 14 lines modified | ||
| 162 | ··-·no_reboot_needed | 175 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 176 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | [[packages]] | 178 | [[packages]] |
| 166 | name·=·"aide" | 179 | name·=·"aide" |
| 167 | version·=·"*" | 180 | version·=·"*" |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 175 | zypper·install·-y·"aide" | ||
| 176 | else | ||
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 178 | fi | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/bin/aide·--init | 183 | $·sudo·/usr/bin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 183 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 185 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 184 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 186 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 185 | generated·database·can·be·installed·as·follows: | 187 | generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 29 lines modified | ||
| 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 212 | ·············_\x8c_\x8i_\x8s············1.4.1 | 212 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 219 | zypper·-q·--no-remote·ref | ||
| 220 | zypper·install·-y·"aide" | ||
| 221 | /usr/bin/aide·--init | ||
| 222 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 223 | else | ||
| 224 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 225 | fi | ||
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 217 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 218 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 219 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 220 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 221 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated | 231 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated |
| 222 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref | 232 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref |
| Offset 312, 29 lines modified | Offset 327, 14 lines modified | ||
| 312 | ··-·PCI-DSSv4-11.5.2 | 327 | ··-·PCI-DSSv4-11.5.2 |
| 313 | ··-·aide_build_database | 328 | ··-·aide_build_database |
| 314 | ··-·low_complexity | 329 | ··-·low_complexity |
| 315 | ··-·low_disruption | 330 | ··-·low_disruption |
| 316 | ··-·medium_severity | 331 | ··-·medium_severity |
| 317 | ··-·no_reboot_needed | 332 | ··-·no_reboot_needed |
| 318 | ··-·restrict_strategy | 333 | ··-·restrict_strategy |
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 320 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 321 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 322 | zypper·-q·--no-remote·ref | ||
| 323 | zypper·install·-y·"aide" | ||
| 324 | /usr/bin/aide·--init | ||
| 325 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 326 | else | ||
| 327 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 328 | fi | ||
| 329 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8md\x8d·T\x8Ti\x8im\x8me\x8er\x8r·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 334 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8md\x8d·T\x8Ti\x8im\x8me\x8er\x8r·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 330 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·systemd·service·and·a·timer | 335 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·systemd·service·and·a·timer |
| 331 | unit·to·run·the·service·periodically:·For·example,·if·a·systemd·timer·is·expected·to·be·started·every·day | 336 | unit·to·run·the·service·periodically:·For·example,·if·a·systemd·timer·is·expected·to·be·started·every·day |
| Max diff block lines reached; 993315/998751 bytes (99.46%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ef0:·206f·6620·3230·323 | 00037ef0:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15200, 130 lines modified | Offset 15200, 130 lines modified | ||
| 0003b5f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b5f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b600:·2223·6964·6d36·3333·3322·2074·6162·696e··"#idm6333"·tabin | 0003b600:·2223·6964·6d36·3333·3322·2074·6162·696e··"#idm6333"·tabin | ||
| 0003b610:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b610:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b620:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b620:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b630:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b630:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b640:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b640:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b650:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b650:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b660:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b670:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b680:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b690:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b6a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b6b0:·2269·646d·3633·3333·223e·3c74·6162·6c65··"idm6333"><table | |||
| 0003b6c0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b6d0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b6e0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b6f0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b700:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b710:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b720:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b730:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b740:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b750:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b760:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b770:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b780:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b790:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b7a0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b7b0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b7c0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b7d0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b7e0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b7f0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b800:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b810:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b820:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b830:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b840:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b850:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b860:·7461·6773·3a0a·2020·2d20·4343·452d·3833··tags:.··-·CCE-83 | |||
| 0003b870:·3238·392d·390a·2020·2d20·434a·4953·2d35··289-9.··-·CJIS-5 | |||
| 0003b880:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b890:·2d53·5449·472d·534c·4553·2d31·352d·3031··-STIG-SLES-15-01 | |||
| 0003b8a0:·3034·3139·0a20·202d·204e·4953·542d·3830··0419.··-·NIST-80 | |||
| 0003b8b0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b8c0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b8d0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b8e0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b8f0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b900:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b910:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b920:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b930:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b940:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b950:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b960:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b970:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b980:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b990:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b9a0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b9b0:·6172·6765·743d·2223·6964·6d36·3333·3422··arget="#idm6334" | |||
| 0003b9c0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b9d0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b9e0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b9f0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003ba00:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003ba10:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003ba20:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003ba30:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003ba40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ba50:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ba60:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ba70:·2269·646d·3633·3334·223e·3c70·7265·3e3c··"idm6334"><pre>< | |||
| 0003ba80:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003ba90:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003baa0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003bab0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bac0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bad0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bae0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003baf0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bb00:·2223·6964·6d36·3333·3522·2074·6162·696e··"#idm6335"·tabin | |||
| 0003bb10:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bb20:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bb30:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bb40:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bb50:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003b660:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b | 0003b670:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b | 0003b680:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b690:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b6a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003b6b0:·6d36·3333·3322·3e3c·7461·626c·6520·636c··m6333"><table·cl | ||
| 0003b | 0003b6c0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003b6d0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003b6e0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003b6f0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003b700:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003b710:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003b720:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003b730:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b740:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003b750:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b | 0003b760:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b | 0003b770:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003b780:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b | 0003b790:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b | 0003b7a0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | ||
| 0003b | 0003b7b0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003b | 0003b7c0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 0003b | 0003b7d0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| Max diff block lines reached; 19308906/19326624 bytes (99.91%) of diff not shown. | |||
| Offset 14324, 16 lines modified | Offset 14324, 16 lines modified | ||
| 00037f30:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037f30:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037f40:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037f40:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037f50:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037f50:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037f60:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037f60:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f70:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f70:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f80:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f80:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037f90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fa0:·2028·6173·206f·6620·3230·323 | 00037fa0:·2028·6173·206f·6620·3230·3235·2d31·322d···(as·of·2025-12- | ||
| 00037fb0:·3 | 00037fb0:·3131·290a·2020·2020·2020·2020·2020·2020··11).············ | ||
| 00037fc0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037fc0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037fd0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037fd0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037fe0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037fe0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037ff0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037ff0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038000:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038000:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038010:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038010:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038020:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038020:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15209, 306 lines modified | Offset 15209, 306 lines modified | ||
| 0003b680:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b680:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b690:·6d35·3939·3022·2074·6162·696e·6465·783d··m5990"·tabindex= | 0003b690:·6d35·3939·3022·2074·6162·696e·6465·783d··m5990"·tabindex= | ||
| 0003b6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b6f0:·6564·6961·7469·6f6e·20 | 0003b6f0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b700:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b710:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b720:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b730:·6170·7365·2220·6964·3d22·6964·6d35·3939··apse"·id="idm599 | |||
| 0003b740:·3022·3e3c·7072·653e·3c63·6f64·653e·0a23··0"><pre><code>.# | |||
| 0003b750:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | |||
| 0003b760:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | |||
| 0003b770:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | |||
| 0003b780:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | |||
| 0003b790:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | |||
| 0003b7a0:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | |||
| 0003b7b0:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | |||
| 0003b7c0:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | |||
| 0003b700:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b710:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b720:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b730:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b740:·3539·3930·223e·3c74·6162·6c65·2063·6c61··5990"><table·cla | |||
| 0003b750:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b760:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b770:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b780:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b790:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b7a0:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | |||
| 0003b7b0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b7c0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0003b7d0:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0003b7e0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b7f0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b800:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b810:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b820:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b830:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b840:·6f64·653e·2d20·6e61·6d65·3a20·2753·6574··ode>-·name:·'Set | |||
| 0003b850:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | |||
| 0003b860:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | |||
| 0003b870:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | |||
| 0003b880:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | |||
| 0003b890:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | |||
| 0003b8a0:·616c·6c5f·636d·643a·207a·7970·7065·7220··all_cmd:·zypper· | |||
| 0003b8b0:·7265·696e·7374·616c·6c20·2d79·0a20·2077··reinstall·-y.··w | |||
| 0003b8c0:·6865·6e3a·2061·6e73·6962·6c65·5f64·6973··hen:·ansible_dis | |||
| 0003b8d0:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | |||
| 0003b8e0:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | |||
| 0003b8f0:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | |||
| 0003b900:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | |||
| 0003b910:·6167·733a·0a20·202d·2043·4345·2d38·3537··ags:.··-·CCE-857 | |||
| 0003b920:·3838·2d38·0a20·202d·2043·4a49·532d·352e··88-8.··-·CJIS-5. | |||
| 0003b930:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | |||
| 0003b940:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | |||
| 0003b950:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | |||
| 0003b960:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | |||
| 0003b970:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | |||
| 0003b980:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b990:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | |||
| 0003b9a0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | |||
| 0003b9b0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | |||
| 0003b9c0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | |||
| 0003b9d0:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | |||
| 0003b9e0:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | |||
| 0003b9f0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003ba00:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003ba10:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003ba20:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | |||
| 0003ba30:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | |||
| 0003ba40:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | |||
| 0003ba50:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | |||
| 0003ba60:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ba70:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003ba80:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | |||
| 0003ba90:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | |||
| 0003baa0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | |||
| 0003bab0:·6b61·6765·206d·616e·6167·6572·2072·6569··kage·manager·rei | |||
| 0003bac0:·6e73·7461·6c6c·2063·6f6d·6d61·6e64·2028··nstall·command·( | |||
| 0003bad0:·7a79·7070·6572·2927·0a20·2073·6574·5f66··zypper)'.··set_f | |||
| 0003bae0:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | |||
| 0003baf0:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | |||
| 0003bb00:·6c6c·5f63·6d64·3a20·7a79·7070·6572·2069··ll_cmd:·zypper·i | |||
| 0003bb10:·6e20·2d66·202d·790a·2020·7768·656e·3a20··n·-f·-y.··when:· | |||
| 0003bb20:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | |||
| 0003bb30:·7469·6f6e·203d·3d20·2253·4c45·5322·0a20··tion·==·"SLES".· | |||
| 0003bb40:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003bb50:·3537·3838·2d38·0a20·202d·2043·4a49·532d··5788-8.··-·CJIS- | |||
| 0003bb60:·352e·3130·2e34·2e31·0a20·202d·204e·4953··5.10.4.1.··-·NIS | |||
| 0003bb70:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | |||
| 0003bb80:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003bb90:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | |||
| 0003bba0:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | |||
| 0003bbb0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003bbc0:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | |||
| 0003bbd0:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | |||
| 0003bbe0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003bbf0:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | |||
| 0003bc00:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | |||
| 0003bc10:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003bc20:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | |||
| 0003bc30:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003bc40:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003bc50:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | |||
| 0003bc60:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | |||
| 0003bc70:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| 0003bc80:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | |||
| Max diff block lines reached; 15873620/15915764 bytes (99.74%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 48 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 49 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 49 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 135, 14 lines modified | Offset 135, 29 lines modified | ||
| 135 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 135 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 136 | ····························A.14.2.3,·A.14.2.4 | 136 | ····························A.14.2.3,·A.14.2.4 |
| 137 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 137 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 138 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 138 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 139 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 140 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 141 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 144 | get·files·names | ||
| 145 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 146 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 147 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 148 | new·line | ||
| 149 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 150 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 151 | fi | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 147 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 157 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 148 | ··set_fact: | 158 | ··set_fact: |
| Offset 274, 29 lines modified | Offset 289, 14 lines modified | ||
| 274 | ··-·PCI-DSSv4-11.5.2 | 289 | ··-·PCI-DSSv4-11.5.2 |
| 275 | ··-·high_complexity | 290 | ··-·high_complexity |
| 276 | ··-·high_severity | 291 | ··-·high_severity |
| 277 | ··-·medium_disruption | 292 | ··-·medium_disruption |
| 278 | ··-·no_reboot_needed | 293 | ··-·no_reboot_needed |
| 279 | ··-·restrict_strategy | 294 | ··-·restrict_strategy |
| 280 | ··-·rpm_verify_hashes | 295 | ··-·rpm_verify_hashes |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 283 | get·files·names | ||
| 284 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 285 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 286 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 287 | new·line | ||
| 288 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 289 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 290 | fi | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 292 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages, | 297 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages, |
| 293 | including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and | 298 | including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and |
| 294 | commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 299 | commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 295 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 300 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 296 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions, | 301 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions, |
| 297 | run·the·following·command·to·determine·which·package·owns·it: | 302 | run·the·following·command·to·determine·which·package·owns·it: |
| Offset 336, 14 lines modified | Offset 336, 46 lines modified | ||
| 336 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 336 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 337 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 337 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 338 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 338 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 339 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 339 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 340 | ····························SRG-OS-000278-GPOS-00108 | 340 | ····························SRG-OS-000278-GPOS-00108 |
| 341 | ·············_\x8c_\x8i_\x8s············6.1.1 | 341 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 342 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 342 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 343 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 344 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 345 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 346 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 347 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 348 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 349 | declare·-A·SETPERMS_RPM_DICT | ||
| 350 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 351 | #·is·expected·by·the·RPM·database | ||
| 352 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 353 | $NF·}') | ||
| 354 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 355 | do | ||
| 356 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 357 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 358 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 359 | ········do | ||
| 360 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 361 | duplicates. | ||
| 362 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 363 | ········done | ||
| 364 | done | ||
| 365 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 366 | #·correct·values | ||
| 367 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 368 | do | ||
| 369 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 370 | done | ||
| 343 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 344 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 372 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 345 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 373 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 346 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 374 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 347 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 375 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 348 | -·name:·Read·list·of·files·with·incorrect·permissions | 376 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 349 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 377 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 424, 46 lines modified | Offset 456, 14 lines modified | ||
| 424 | ··-·PCI-DSSv4-11.5.2 | 456 | ··-·PCI-DSSv4-11.5.2 |
| 425 | ··-·high_complexity | 457 | ··-·high_complexity |
| 426 | ··-·high_severity | 458 | ··-·high_severity |
| 427 | ··-·medium_disruption | 459 | ··-·medium_disruption |
| Max diff block lines reached; 1164520/1170872 bytes (99.46%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037df0:·206f·6620·3230·323 | 00037df0:·206f·6620·3230·3235·2d31·322d·3131·290a···of·2025-12-11). | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15196, 307 lines modified | Offset 15196, 307 lines modified | ||
| 0003b5b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b5b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b5c0:·2223·6964·6d35·3939·3022·2074·6162·696e··"#idm5990"·tabin | 0003b5c0:·2223·6964·6d35·3939·3022·2074·6162·696e··"#idm5990"·tabin | ||
| 0003b5d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b5d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b5e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b5e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b5f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b5f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b600:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b600:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b610:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b610:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b620:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b620:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b630:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b640:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b650:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b660:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b670:·6d35·3939·3022·3e3c·7072·653e·3c63·6f64··m5990"><pre><cod | |||
| 0003b680:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b690:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b6a0:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b6b0:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b6c0:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b6d0:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b6e0:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b6f0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b630:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b640:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b650:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b660:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b670:·2269·646d·3539·3930·223e·3c74·6162·6c65··"idm5990"><table | |||
| 0003b680:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b690:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b6a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b6b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b6c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b6d0:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | |||
| 0003b6e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b6f0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b700:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0003b710:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b720:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b730:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b740:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b750:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003b760:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b770:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b780:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | |||
| 0003b790:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | |||
| 0003b7a0:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | |||
| 0003b7b0:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | |||
| 0003b7c0:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | |||
| 0003b7d0:·696e·7374·616c·6c5f·636d·643a·207a·7970··install_cmd:·zyp | |||
| 0003b7e0:·7065·7220·7265·696e·7374·616c·6c20·2d79··per·reinstall·-y | |||
| 0003b7f0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b800:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | |||
| 0003b810:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | |||
| 0003b820:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | |||
| 0003b830:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | |||
| 0003b840:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b850:·2d38·3537·3838·2d38·0a20·202d·2043·4a49··-85788-8.··-·CJI | |||
| 0003b860:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | |||
| 0003b870:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | |||
| 0003b880:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | |||
| 0003b890:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | |||
| 0003b8a0:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | |||
| 0003b8b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b8c0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | |||
| 0003b8d0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | |||
| 0003b8e0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b8f0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | |||
| 0003b900:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | |||
| 0003b910:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | |||
| 0003b920:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | |||
| 0003b930:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b940:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b950:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | |||
| 0003b960:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | |||
| 0003b970:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | |||
| 0003b980:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b990:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b9a0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | |||
| 0003b9b0:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | |||
| 0003b9c0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | |||
| 0003b9d0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | |||
| 0003b9e0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | |||
| 0003b9f0:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | |||
| 0003ba00:·6e64·2028·7a79·7070·6572·2927·0a20·2073··nd·(zypper)'.··s | |||
| 0003ba10:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | |||
| 0003ba20:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | |||
| 0003ba30:·6e73·7461·6c6c·5f63·6d64·3a20·7a79·7070··nstall_cmd:·zypp | |||
| 0003ba40:·6572·2069·6e20·2d66·202d·790a·2020·7768··er·in·-f·-y.··wh | |||
| 0003ba50:·656e·3a20·616e·7369·626c·655f·6469·7374··en:·ansible_dist | |||
| 0003ba60:·7269·6275·7469·6f6e·203d·3d20·2253·4c45··ribution·==·"SLE | |||
| 0003ba70:·5322·0a20·2074·6167·733a·0a20·202d·2043··S".··tags:.··-·C | |||
| 0003ba80:·4345·2d38·3537·3838·2d38·0a20·202d·2043··CE-85788-8.··-·C | |||
| 0003ba90:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | |||
| 0003baa0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | |||
| 0003bab0:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | |||
| 0003bac0:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | |||
| 0003bad0:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003bae0:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | |||
| 0003baf0:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | |||
| 0003bb00:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bb10:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | |||
| 0003bb20:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | |||
| 0003bb30:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | |||
| 0003bb40:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bb50:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | |||
| 0003bb60:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003bb70:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003bb80:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | |||
| 0003bb90:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | |||
| 0003bba0:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | |||
| 0003bbb0:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | |||
| 0003bbc0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| Max diff block lines reached; 14266833/14308977 bytes (99.71%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·15 | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·15 |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 41 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 130, 14 lines modified | Offset 130, 29 lines modified | ||
| 130 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 130 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 131 | ····························A.14.2.3,·A.14.2.4 | 131 | ····························A.14.2.3,·A.14.2.4 |
| 132 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 132 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 133 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 133 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 139 | get·files·names | ||
| 140 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 141 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 142 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 143 | new·line | ||
| 144 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 145 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 146 | fi | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 142 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 152 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 143 | ··set_fact: | 153 | ··set_fact: |
| Offset 269, 29 lines modified | Offset 284, 14 lines modified | ||
| 269 | ··-·PCI-DSSv4-11.5.2 | 284 | ··-·PCI-DSSv4-11.5.2 |
| 270 | ··-·high_complexity | 285 | ··-·high_complexity |
| 271 | ··-·high_severity | 286 | ··-·high_severity |
| 272 | ··-·medium_disruption | 287 | ··-·medium_disruption |
| 273 | ··-·no_reboot_needed | 288 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 289 | ··-·restrict_strategy |
| 275 | ··-·rpm_verify_hashes | 290 | ··-·rpm_verify_hashes |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 278 | get·files·names | ||
| 279 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 280 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 281 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 282 | new·line | ||
| 283 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 284 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 285 | fi | ||
| 286 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 287 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 292 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 288 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 293 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 289 | which·can·be·found·with: | 294 | which·can·be·found·with: |
| 290 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 295 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 291 | run·the·following·command·to·determine·which·package·owns·it: | 296 | run·the·following·command·to·determine·which·package·owns·it: |
| 292 | $·rpm·-qf·FILENAME | 297 | $·rpm·-qf·FILENAME |
| Offset 373, 14 lines modified | Offset 373, 46 lines modified | ||
| 373 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 373 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 374 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 374 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 375 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 375 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 376 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 376 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 377 | ····························SRG-OS-000278-GPOS-00108 | 377 | ····························SRG-OS-000278-GPOS-00108 |
| 378 | ·············_\x8c_\x8i_\x8s············6.1.1 | 378 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 379 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 379 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 385 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 386 | declare·-A·SETPERMS_RPM_DICT | ||
| 387 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 388 | #·is·expected·by·the·RPM·database | ||
| 389 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 390 | $NF·}') | ||
| 391 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 392 | do | ||
| 393 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 394 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 395 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 396 | ········do | ||
| 397 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 398 | duplicates. | ||
| 399 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 400 | ········done | ||
| 401 | done | ||
| 402 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 403 | #·correct·values | ||
| 404 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 405 | do | ||
| 406 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 407 | done | ||
| 380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 408 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 409 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 410 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 411 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 412 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 385 | -·name:·Read·list·of·files·with·incorrect·permissions | 413 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 386 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 414 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 461, 46 lines modified | Offset 493, 14 lines modified | ||
| 461 | ··-·PCI-DSSv4-11.5.2 | 493 | ··-·PCI-DSSv4-11.5.2 |
| 462 | ··-·high_complexity | 494 | ··-·high_complexity |
| 463 | ··-·high_severity | 495 | ··-·high_severity |
| 464 | ··-·medium_disruption | 496 | ··-·medium_disruption |
| Max diff block lines reached; 1379043/1385244 bytes (99.55%) of diff not shown. | |||
| Offset 14314, 15 lines modified | Offset 14314, 15 lines modified | ||
| 00037e90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037ea0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037ea0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037eb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037eb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ec0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ec0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037ed0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037ed0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ee0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ee0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ef0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ef0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037f00:·323 | 00037f00:·3235·2d31·322d·3131·290a·2020·2020·2020··25-12-11).······ | ||
| 00037f10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037f10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15135, 129 lines modified | Offset 15135, 129 lines modified | ||
| 0003b1e0:·7461·7267·6574·3d22·2369·646d·3633·3333··target="#idm6333 | 0003b1e0:·7461·7267·6574·3d22·2369·646d·3633·3333··target="#idm6333 | ||
| 0003b1f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b200:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b200:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b210:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b210:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b220:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b220:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b230:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b230:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b240:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b240:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b250:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b260:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b270:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b280:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b290:·7365·2220·6964·3d22·6964·6d36·3333·3322··se"·id="idm6333" | |||
| 0003b2a0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b2b0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b2c0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b2d0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b2e0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2f0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b300:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b310:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b320:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b330:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b340:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b350:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b360:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b370:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b380:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b390:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b3a0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b3b0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b3c0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b3d0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b3e0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b3f0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b400:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b410:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b420:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b430:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b440:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b450:·2043·4345·2d38·3332·3839·2d39·0a20·202d···CCE-83289-9.··- | |||
| 0003b460:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b470:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b480:·532d·3135·2d30·3130·3431·390a·2020·2d20··S-15-010419.··-· | |||
| 0003b490:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b4a0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b4b0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b4c0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b4d0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b4e0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b4f0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b500:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b510:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b520:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b530:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b540:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b550:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b560:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b570:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b580:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b590:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b5a0:·646d·3633·3334·2220·7461·6269·6e64·6578··dm6334"·tabindex | |||
| 0003b5b0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b5c0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b5d0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b5e0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b5f0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b600:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003b610:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b620:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b630:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b640:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b650:·7365·2220·6964·3d22·6964·6d36·3333·3422··se"·id="idm6334" | |||
| 0003b660:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b670:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b680:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b690:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b6a0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b6b0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b6c0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b6d0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b6e0:·7461·7267·6574·3d22·2369·646d·3633·3335··target="#idm6335 | |||
| 0003b6f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b700:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b710:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b720:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b730:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b740:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003b250:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0003b | 0003b260:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b270:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b280:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003b290:·2069·643d·2269·646d·3633·3333·223e·3c74···id="idm6333"><t | ||
| 0003b | 0003b2a0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003b2b0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003b2c0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003b2d0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003b2e0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b | 0003b2f0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003b300:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b310:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b | 0003b320:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003b330:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b340:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b350:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b360:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b370:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | ||
| 0003b | 0003b380:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b | 0003b390:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 0003b | 0003b3a0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 0003b | 0003b3b0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 0003b | 0003b3c0:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | ||
| Max diff block lines reached; 22529907/22547487 bytes (99.92%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | ··············(SLES)·for·SAP·Applications·15 | 42 | ··············(SLES)·for·SAP·Applications·15 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening-sap | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening-sap |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 125, 14 lines modified | Offset 125, 27 lines modified | ||
| 125 | include·install_aide | 125 | include·install_aide |
| 126 | class·install_aide·{ | 126 | class·install_aide·{ |
| 127 | ··package·{·'aide': | 127 | ··package·{·'aide': |
| 128 | ····ensure·=>·'installed', | 128 | ····ensure·=>·'installed', |
| 129 | ··} | 129 | ··} |
| 130 | } | 130 | } |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 138 | zypper·install·-y·"aide" | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 137 | ··package: | 148 | ··package: |
| Offset 153, 27 lines modified | Offset 166, 14 lines modified | ||
| 153 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | [[packages]] | 169 | [[packages]] |
| 157 | name·=·"aide" | 170 | name·=·"aide" |
| 158 | version·=·"*" | 171 | version·=·"*" |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 166 | zypper·install·-y·"aide" | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 171 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 173 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 172 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward | 174 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward |
| 173 | ·············ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g., | 175 | ·············ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g., |
| 174 | ·············audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information | 176 | ·············audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information |
| 175 | ·············system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source | 177 | ·············system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source |
| 176 | ·············audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and | 178 | ·············audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and |
| Offset 187, 14 lines modified | Offset 187, 82 lines modified | ||
| 187 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 187 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 188 | Identifiers:·CCE-85610-4 | 188 | Identifiers:·CCE-85610-4 |
| 189 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496 | 189 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496 |
| 190 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 | 190 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 |
| 191 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 | 191 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 |
| 192 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 | 192 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 |
| 193 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r877393_rule | 193 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r877393_rule |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 199 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 200 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 201 | zypper·install·-y·"aide" | ||
| 202 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 203 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 204 | aide.conf | ||
| 205 | else | ||
| 206 | echo·"/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 207 | fi | ||
| 208 | if·grep·-i·'^.*/usr/sbin/auditd.*$'·/etc/aide.conf;·then | ||
| 209 | sed·-i·"s#.*/usr/sbin/auditd.*#/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 210 | else | ||
| 211 | echo·"/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 212 | fi | ||
| 213 | if·grep·-i·'^.*/usr/sbin/ausearch.*$'·/etc/aide.conf;·then | ||
| 214 | sed·-i·"s#.*/usr/sbin/ausearch.*#/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 215 | aide.conf | ||
| 216 | else | ||
| 217 | echo·"/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 218 | fi | ||
| 219 | if·grep·-i·'^.*/usr/sbin/aureport.*$'·/etc/aide.conf;·then | ||
| 220 | sed·-i·"s#.*/usr/sbin/aureport.*#/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 221 | aide.conf | ||
| 222 | else | ||
| 223 | echo·"/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 224 | fi | ||
| 225 | if·grep·-i·'^.*/usr/sbin/autrace.*$'·/etc/aide.conf;·then | ||
| 226 | sed·-i·"s#.*/usr/sbin/autrace.*#/usr/sbin/autrace·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| Max diff block lines reached; 1733470/1739763 bytes (99.64%) of diff not shown. | |||
| Offset 14300, 16 lines modified | Offset 14300, 16 lines modified | ||
| 00037db0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037db0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037dc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037dc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037dd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037dd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037de0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037de0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037df0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037df0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e20:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037e30:·2d31·3 | 00037e30:·2d31·322d·3131·290a·2020·2020·2020·2020··-12-11).········ | ||
| 00037e40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037e90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037e90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ea0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ea0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15007, 358 lines modified | Offset 15007, 358 lines modified | ||
| 0003a9e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003a9e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003a9f0:·743d·2223·6964·6d36·3434·3022·2074·6162··t="#idm6440"·tab | 0003a9f0:·743d·2223·6964·6d36·3434·3022·2074·6162··t="#idm6440"·tab | ||
| 0003aa00:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003aa00:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003aa10:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003aa10:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003aa20:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003aa20:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003aa30:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003aa30:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003aa40:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003aa40:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003aa50:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003aa50:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003aa60:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003aa70:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003aa80:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003aa90:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003aaa0:·6964·6d36·3434·3022·3e3c·7461·626c·6520··idm6440"><table· | |||
| 0003aab0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003aac0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003aad0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003aae0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003aaf0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003aa60:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003aa70:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003aa80:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003aa90:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003aaa0:·643d·2269·646d·3634·3430·223e·3c74·6162··d="idm6440"><tab | |||
| 0003aab0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003aac0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003aad0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003aae0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003aaf0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ab00:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ab10:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ab20:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003ab30:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ab40:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ab50:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003ab60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ab70:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ab80:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003ab90:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003aba0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·436f··<code>-·name:·Co | |||
| 0003abb0:·6e66·6967·7572·6520·4149·4445·2074·6f20··nfigure·AIDE·to· | |||
| 0003abc0:·5665·7269·6679·2074·6865·2041·7564·6974··Verify·the·Audit | |||
| 0003abd0:·2054·6f6f·6c73·202d·2047·6174·6865·7220···Tools·-·Gather· | |||
| 0003abe0:·4c69·7374·206f·6620·5061·636b·6167·6573··List·of·Packages | |||
| 0003abf0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003ac00:·2d38·3536·3130·2d34·0a20·202d·2044·4953··-85610-4.··-·DIS | |||
| 0003ac10:·412d·5354·4947·2d53·4c45·532d·3135·2d30··A-STIG-SLES-15-0 | |||
| 0003ac20:·3330·3633·300a·2020·2d20·4e49·5354·2d38··30630.··-·NIST-8 | |||
| 0003ac30:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | |||
| 0003ac40:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | |||
| 0003ac50:·2d39·2833·292e·310a·2020·2d20·6169·6465··-9(3).1.··-·aide | |||
| 0003ac60:·5f63·6865·636b·5f61·7564·6974·5f74·6f6f··_check_audit_too | |||
| 0003ac70:·6c73·0a20·202d·2061·6964·655f·6368·6563··ls.··-·aide_chec | |||
| 0003ac80:·6b5f·6175·6469·745f·746f·6f6c·730a·2020··k_audit_tools.·· | |||
| 0003ac90:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003aca0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003acb0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003acc0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003acd0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ace0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003acf0:·6779·0a20·2061·6e73·6962·6c65·2e62·7569··gy.··ansible.bui | |||
| 0003ad00:·6c74·696e·2e70·6163·6b61·6765·5f66·6163··ltin.package_fac | |||
| 0003ad10:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003ad20:·2061·7574·6f0a·2020·7768·656e·3a20·616e···auto.··when:·an | |||
| 0003ad30:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003ad40:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003ad50:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003ad60:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003ad70:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003ad80:·7222·5d0a·0a2d·206e·616d·653a·2045·6e73··r"]..-·name:·Ens | |||
| 0003ad90:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003ada0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003adb0:·0a20·2020·206e·616d·653a·2027·7b7b·2069··.····name:·'{{·i | |||
| 0003adc0:·7465·6d20·7d7d·270a·2020·2020·7374·6174··tem·}}'.····stat | |||
| 0003add0:·653a·2070·7265·7365·6e74·0a20·2077·6974··e:·present.··wit | |||
| 0003ade0:·685f·6974·656d·733a·0a20·202d·2061·6964··h_items:.··-·aid | |||
| 0003adf0:·650a·2020·7768·656e·3a20·616e·7369·626c··e.··when:·ansibl | |||
| 0003ae00:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003ae10:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003ae20:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003ae30:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003ae40:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003ae50:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003ae60:·3835·3631·302d·340a·2020·2d20·4449·5341··85610-4.··-·DISA | |||
| 0003ae70:·2d53·5449·472d·534c·4553·2d31·352d·3033··-STIG-SLES-15-03 | |||
| 0003ae80:·3036·3330·0a20·202d·204e·4953·542d·3830··0630.··-·NIST-80 | |||
| 0003ae90:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | |||
| 0003aea0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | |||
| 0003aeb0:·3928·3329·2e31·0a20·202d·2061·6964·655f··9(3).1.··-·aide_ | |||
| 0003aec0:·6368·6563·6b5f·6175·6469·745f·746f·6f6c··check_audit_tool | |||
| 0003aed0:·730a·2020·2d20·6c6f·775f·636f·6d70·6c65··s.··-·low_comple | |||
| 0003aee0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003aef0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003af00:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003af10:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003af20:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | |||
| 0003af30:·7261·7465·6779·0a0a·2d20·6e61·6d65·3a20··rategy..-·name:· | |||
| 0003af40:·5365·7420·6175·6469·745f·746f·6f6c·7320··Set·audit_tools· | |||
| 0003af50:·6661·6374·0a20·2073·6574·5f66·6163·743a··fact.··set_fact: | |||
| 0003af60:·0a20·2020·2061·7564·6974·5f74·6f6f·6c73··.····audit_tools | |||
| 0003af70:·3a0a·2020·2020·2d20·2f75·7372·2f73·6269··:.····-·/usr/sbi | |||
| 0003af80:·6e2f·6175·6469·7370·640a·2020·2020·2d20··n/audispd.····-· | |||
| 0003af90:·2f75·7372·2f73·6269·6e2f·6175·6469·7463··/usr/sbin/auditc | |||
| 0003afa0:·746c·0a20·2020·202d·202f·7573·722f·7362··tl.····-·/usr/sb | |||
| 0003afb0:·696e·2f61·7564·6974·640a·2020·2020·2d20··in/auditd.····-· | |||
| 0003afc0:·2f75·7372·2f73·6269·6e2f·6175·6765·6e72··/usr/sbin/augenr | |||
| 0003afd0:·756c·6573·0a20·2020·202d·202f·7573·722f··ules.····-·/usr/ | |||
| 0003afe0:·7362·696e·2f61·7572·6570·6f72·740a·2020··sbin/aureport.·· | |||
| 0003aff0:·2020·2d20·2f75·7372·2f73·6269·6e2f·6175····-·/usr/sbin/au | |||
| 0003b000:·7365·6172·6368·0a20·2020·202d·202f·7573··search.····-·/us | |||
| 0003b010:·722f·7362·696e·2f61·7574·7261·6365·0a20··r/sbin/autrace.· | |||
| Max diff block lines reached; 20875245/20924565 bytes (99.76%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Public·Cloud·Hardening·for·SUSE·Linux·Enterprise·15 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Public·Cloud·Hardening·for·SUSE·Linux·Enterprise·15 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 52 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 52 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 101, 14 lines modified | Offset 101, 82 lines modified | ||
| 101 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 101 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 102 | Identifiers:·CCE-85610-4 | 102 | Identifiers:·CCE-85610-4 |
| 103 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496 | 103 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496 |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 | 104 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 |
| 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 | 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 |
| 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 | 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 |
| 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r877393_rule | 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r877393_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 113 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 114 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 115 | zypper·install·-y·"aide" | ||
| 116 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 117 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 118 | aide.conf | ||
| 119 | else | ||
| 120 | echo·"/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 121 | fi | ||
| 122 | if·grep·-i·'^.*/usr/sbin/auditd.*$'·/etc/aide.conf;·then | ||
| 123 | sed·-i·"s#.*/usr/sbin/auditd.*#/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 124 | else | ||
| 125 | echo·"/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 126 | fi | ||
| 127 | if·grep·-i·'^.*/usr/sbin/ausearch.*$'·/etc/aide.conf;·then | ||
| 128 | sed·-i·"s#.*/usr/sbin/ausearch.*#/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 129 | aide.conf | ||
| 130 | else | ||
| 131 | echo·"/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 132 | fi | ||
| 133 | if·grep·-i·'^.*/usr/sbin/aureport.*$'·/etc/aide.conf;·then | ||
| 134 | sed·-i·"s#.*/usr/sbin/aureport.*#/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 135 | aide.conf | ||
| 136 | else | ||
| 137 | echo·"/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 138 | fi | ||
| 139 | if·grep·-i·'^.*/usr/sbin/autrace.*$'·/etc/aide.conf;·then | ||
| 140 | sed·-i·"s#.*/usr/sbin/autrace.*#/usr/sbin/autrace·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 141 | else | ||
| 142 | echo·"/usr/sbin/autrace·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 143 | fi | ||
| 144 | if·grep·-i·'^.*/usr/sbin/augenrules.*$'·/etc/aide.conf;·then | ||
| 145 | sed·-i·"s#.*/usr/sbin/augenrules.*#/usr/sbin/augenrules·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 146 | aide.conf | ||
| 147 | else | ||
| 148 | echo·"/usr/sbin/augenrules·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 149 | fi | ||
| 150 | if·grep·-i·'^.*/usr/sbin/audispd.*$'·/etc/aide.conf;·then | ||
| 151 | sed·-i·"s#.*/usr/sbin/audispd.*#/usr/sbin/audispd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 152 | else | ||
| 153 | echo·"/usr/sbin/audispd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 113 | -·name:·Configure·AIDE·to·Verify·the·Audit·Tools·-·Gather·List·of·Packages | 163 | -·name:·Configure·AIDE·to·Verify·the·Audit·Tools·-·Gather·List·of·Packages |
| 114 | ··tags: | 164 | ··tags: |
| Offset 201, 82 lines modified | Offset 269, 14 lines modified | ||
| 201 | ··-·NIST-800-53-AU-9(3).1 | 269 | ··-·NIST-800-53-AU-9(3).1 |
| 202 | ··-·aide_check_audit_tools | 270 | ··-·aide_check_audit_tools |
| 203 | ··-·low_complexity | 271 | ··-·low_complexity |
| 204 | ··-·low_disruption | 272 | ··-·low_disruption |
| 205 | ··-·medium_severity | 273 | ··-·medium_severity |
| 206 | ··-·no_reboot_needed | 274 | ··-·no_reboot_needed |
| 207 | ··-·restrict_strategy | 275 | ··-·restrict_strategy |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 211 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 212 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 213 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 214 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 215 | zypper·install·-y·"aide" | ||
| 216 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 217 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| Max diff block lines reached; 1490482/1497395 bytes (99.54%) of diff not shown. | |||
| Offset 14307, 15 lines modified | Offset 14307, 15 lines modified | ||
| 00037e20:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037e20:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037e30:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037e30:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037e40:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037e40:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e50:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e50:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e60:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e60:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e70:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e70:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e80:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e80:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e90:·3230·323 | 00037e90:·3230·3235·2d31·322d·3131·290a·2020·2020··2025-12-11).···· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037ea0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037eb0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037eb0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037ec0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037ec0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037ed0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037ed0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037ee0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037ee0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037ef0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037ef0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037f00:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037f00:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16822, 96 lines modified | Offset 16822, 96 lines modified | ||
| 00041b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00041b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00041b60:·743d·2223·6964·6d39·3336·3222·2074·6162··t="#idm9362"·tab | 00041b60:·743d·2223·6964·6d39·3336·3222·2074·6162··t="#idm9362"·tab | ||
| 00041b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00041b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00041b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00041b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00041b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00041b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00041ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00041ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00041bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00041bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00041bc0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 00041bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 00041bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00041be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00041bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00041c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00041c10:·6964·6d39·3336·3222·3e3c·7461·626c·6520··idm9362"><table· | |||
| 00041c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00041c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00041c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00041c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00041c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00041c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00041c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00041c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00041bd0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 00041be0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00041bf0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00041c00:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00041c10:·643d·2269·646d·3933·3632·223e·3c74·6162··d="idm9362"><tab | |||
| 00041c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00041c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00041c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00041c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00041c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00041c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00041c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00041c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00041ca0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | |||
| 00041cb0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00041cc0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 00041cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00041ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00041c | 00041ca0:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 00041cb0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00041cc0:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 00041cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00041ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7061··tegy:</th><td>pa | |||
| 00041cf0:·7463·683c·2f74·643e·3c2f·7472·3e3c·2f74··tch</td></tr></t | |||
| 00041d00:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00041d10:·0a0a·7a79·7070·6572·2070·6174·6368·202d··..zypper·patch·- | |||
| 00041d20:·6720·7365·6375·7269·7479·202d·790a·3c2f··g·security·-y.</ | |||
| 00041d30:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00041d40:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00041d50:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00041d60:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00041d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00041d10:·6465·3e2d·206e·616d·653a·2053·6563·7572··de>-·name:·Secur | |||
| 00041d20:·6974·7920·7061·7463·6865·7320·6172·6520··ity·patches·are· | |||
| 00041d30:·7570·2074·6f20·6461·7465·0a20·2070·6163··up·to·date.··pac | |||
| 00041d40:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00041d50:·272a·270a·2020·2020·7374·6174·653a·206c··'*'.····state:·l | |||
| 00041d60:·6174·6573·740a·2020·7461·6773·3a0a·2020··atest.··tags:.·· | |||
| 00041d70:·2d20·4343·452d·3833·3236·312d·380a·2020··-·CCE-83261-8.·· | |||
| 00041d80:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | |||
| 00041d90:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 00041da0:·4553·2d31·352d·3031·3030·3130·0a20·202d··ES-15-010010.··- | |||
| 00041db0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 00041dc0:·3628·6129·0a20·202d·204e·4953·542d·3830··6(a).··-·NIST-80 | |||
| 00041dd0:·302d·3533·2d53·492d·3228·3529·0a20·202d··0-53-SI-2(5).··- | |||
| 00041de0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | |||
| 00041df0:·3228·6329·0a20·202d·2050·4349·2d44·5353··2(c).··-·PCI-DSS | |||
| 00041e00:·2d52·6571·2d36·2e32·0a20·202d·2050·4349··-Req-6.2.··-·PCI | |||
| 00041e10:·2d44·5353·7634·2d36·2e33·2e33·0a20·202d··-DSSv4-6.3.3.··- | |||
| 00041e20:·2068·6967·685f·6469·7372·7570·7469·6f6e···high_disruption | |||
| 00041e30:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 00041e40:·6974·790a·2020·2d20·6d65·6469·756d·5f73··ity.··-·medium_s | |||
| 00041e50:·6576·6572·6974·790a·2020·2d20·7061·7463··everity.··-·patc | |||
| 00041e60:·685f·7374·7261·7465·6779·0a20·202d·2072··h_strategy.··-·r | |||
| 00041e70:·6562·6f6f·745f·7265·7175·6972·6564·0a20··eboot_required.· | |||
| 00041e80:·202d·2073·6563·7572·6974·795f·7061·7463···-·security_patc | |||
| 00041e90:·6865·735f·7570·5f74·6f5f·6461·7465·0a20··hes_up_to_date.· | |||
| 00041ea0:·202d·2073·6b69·705f·616e·7369·626c·655f···-·skip_ansible_ | |||
| 00041eb0:·6c69·6e74·0a3c·2f63·6f64·653e·3c2f·7072··lint.</code></pr | |||
| 00041ec0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00041ed0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00041 | 00041d70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 00041d80:·2369·646d·3933·3633·2220·7461·6269·6e64··#idm9363"·tabind | |||
| 00041d90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00041da0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00041db0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00041dc0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00041dd0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00041de0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 00041df0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 00041ef0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00041f00:·6172·6765·743d·2223·6964·6d39·3336·3322··arget="#idm9363" | |||
| 00041f10:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00041f20:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00041f30:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00041f40:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00041f50:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00041f60:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00041f70:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 00041 | 00041e00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 00041 | 00041e10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 00041 | 00041e20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 00041 | 00041e30:·6964·6d39·3336·3322·3e3c·7461·626c·6520··idm9363"><table· | ||
| 00041 | 00041e40:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 00041 | 00041e50:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 00041 | 00041e60:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 00041 | 00041e70:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0004 | 00041e80:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0004 | 00041e90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 00042020:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| Max diff block lines reached; 9098510/9111534 bytes (99.86%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·15 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·15 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 44 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 45 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 276, 14 lines modified | Offset 276, 22 lines modified | ||
| 276 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 276 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 277 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 277 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 278 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010010 | 278 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010010 |
| 279 | ·············_\x8c_\x8i_\x8s············1.9 | 279 | ·············_\x8c_\x8i_\x8s············1.9 |
| 280 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R61 | 280 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R61 |
| 281 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 | 281 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 |
| 282 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234802r622137_rule | 282 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234802r622137_rule |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | ||
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | ||
| 288 | zypper·patch·-g·security·-y | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 290 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 291 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 292 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | 293 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch |
| 288 | -·name:·Security·patches·are·up·to·date | 294 | -·name:·Security·patches·are·up·to·date |
| 289 | ··package: | 295 | ··package: |
| Offset 301, 22 lines modified | Offset 309, 14 lines modified | ||
| 301 | ··-·high_disruption | 309 | ··-·high_disruption |
| 302 | ··-·low_complexity | 310 | ··-·low_complexity |
| 303 | ··-·medium_severity | 311 | ··-·medium_severity |
| 304 | ··-·patch_strategy | 312 | ··-·patch_strategy |
| 305 | ··-·reboot_required | 313 | ··-·reboot_required |
| 306 | ··-·security_patches_up_to_date | 314 | ··-·security_patches_up_to_date |
| 307 | ··-·skip_ansible_lint | 315 | ··-·skip_ansible_lint |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | ||
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | ||
| 313 | zypper·patch·-g·security·-y | ||
| 314 | Group ·Account·and·Access·Control· Group·contains·6·groups·and·7·rules | 316 | Group ·Account·and·Access·Control· Group·contains·6·groups·and·7·rules |
| 315 | _\x8[_\x8r_\x8e_\x8f_\x8] ·In·traditional·Unix·security,·if·an·attacker·gains·shell·access·to·a·certain·login·account, | 317 | _\x8[_\x8r_\x8e_\x8f_\x8] ·In·traditional·Unix·security,·if·an·attacker·gains·shell·access·to·a·certain·login·account, |
| 316 | they·can·perform·any·action·or·access·any·file·to·which·that·account·has·access.·Therefore,·making·it | 318 | they·can·perform·any·action·or·access·any·file·to·which·that·account·has·access.·Therefore,·making·it |
| 317 | more·difficult·for·unauthorized·people·to·gain·shell·access·to·accounts,·particularly·to·privileged | 319 | more·difficult·for·unauthorized·people·to·gain·shell·access·to·accounts,·particularly·to·privileged |
| 318 | accounts,·is·a·necessary·part·of·securing·a·system.·This·section·introduces·mechanisms·for | 320 | accounts,·is·a·necessary·part·of·securing·a·system.·This·section·introduces·mechanisms·for |
| 319 | restricting·access·to·accounts·under·SUSE·Linux·Enterprise·15. | 321 | restricting·access·to·accounts·under·SUSE·Linux·Enterprise·15. |
| 320 | Group ·Protect·Accounts·by·Configuring·PAM· Group·contains·2·groups·and·2·rules | 322 | Group ·Protect·Accounts·by·Configuring·PAM· Group·contains·2·groups·and·2·rules |
| Offset 518, 14 lines modified | Offset 518, 306 lines modified | ||
| 518 | ·············_\x8n_\x8i_\x8s_\x8t···········AC-9,·AC-9(1) | 518 | ·············_\x8n_\x8i_\x8s_\x8t···········AC-9,·AC-9(1) |
| 519 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 519 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 520 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.2.4 | 520 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.2.4 |
| 521 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 521 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 522 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-020080 | 522 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-020080 |
| 523 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1.4 | 523 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1.4 |
| 524 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234873r858542_rule | 524 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234873r858542_rule |
| 525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 526 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 527 | if·rpm·--quiet·-q·pam;·then | ||
| 528 | if·[·-f·/usr/bin/authselect·];·then | ||
| 529 | ····if·authselect·list-features·sssd·|·grep·-q·with-silent-lastlog;·then | ||
| 530 | ········if·!·authselect·check;·then | ||
| 531 | ········echo·" | ||
| 532 | ········authselect·integrity·check·failed.·Remediation·aborted! | ||
| 533 | ········This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected·or·the | ||
| 534 | selected·profile·is·not·intact. | ||
| 535 | ········It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is·available. | ||
| 536 | ········In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a·custom | ||
| 537 | authselect·profile·is·recommended." | ||
| 538 | ········exit·1 | ||
| 539 | ········fi | ||
| 540 | ········authselect·disable-feature·with-silent-lastlog | ||
| 541 | ········authselect·apply-changes·-b | ||
| 542 | ····else | ||
| 543 | ········if·!·authselect·check;·then | ||
| 544 | ········echo·" | ||
| 545 | ········authselect·integrity·check·failed.·Remediation·aborted! | ||
| 546 | ········This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected·or·the | ||
| 547 | selected·profile·is·not·intact. | ||
| 548 | ········It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is·available. | ||
| 549 | ········In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a·custom | ||
| 550 | authselect·profile·is·recommended." | ||
| 551 | ········exit·1 | ||
| 552 | ········fi | ||
| 553 | ········CURRENT_PROFILE=$(authselect·current·-r·|·awk·'{·print·$1·}') | ||
| 554 | ········#·If·not·already·in·use,·a·custom·profile·is·created·preserving·the·enabled·features. | ||
| 555 | ········if·[[·!·$CURRENT_PROFILE·==·custom/*·]];·then | ||
| 556 | ············ENABLED_FEATURES=$(authselect·current·|·tail·-n+3·|·awk·'{·print·$2·}') | ||
| 557 | ············authselect·create-profile·hardening·-b·$CURRENT_PROFILE | ||
| 558 | ············CURRENT_PROFILE="custom/hardening" | ||
| 559 | ············authselect·apply-changes·-b·--backup=before-hardening-custom-profile | ||
| 560 | ············authselect·select·$CURRENT_PROFILE | ||
| 561 | ············for·feature·in·$ENABLED_FEATURES;·do | ||
| 562 | ················authselect·enable-feature·$feature; | ||
| 563 | ············done | ||
| 564 | ············authselect·apply-changes·-b·--backup=after-hardening-custom-profile | ||
| 565 | ········fi | ||
| 566 | ········PAM_FILE_NAME=$(basename·"/etc/pam.d/login") | ||
| 567 | ········PAM_FILE_PATH="/etc/authselect/$CURRENT_PROFILE/$PAM_FILE_NAME" | ||
| 568 | ········authselect·apply-changes·-b | ||
| 569 | ········if·[·-e·"$PAM_FILE_PATH"·]·;·then | ||
| 570 | ············PAM_FILE_PATH="$PAM_FILE_PATH" | ||
| 571 | ············if·[·-f·/usr/bin/authselect·];·then | ||
| 572 | ················if·!·authselect·check;·then | ||
| 573 | ················echo·" | ||
| 574 | ················authselect·integrity·check·failed.·Remediation·aborted! | ||
| Max diff block lines reached; 886522/903855 bytes (98.08%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037df0:·6173·206f·6620·3230·323 | 00037df0:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15145, 130 lines modified | Offset 15145, 130 lines modified | ||
| 0003b280:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b280:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b290:·743d·2223·6964·6d36·3333·3322·2074·6162··t="#idm6333"·tab | 0003b290:·743d·2223·6964·6d36·3333·3322·2074·6162··t="#idm6333"·tab | ||
| 0003b2a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b2a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b2b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b2b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b2c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b2c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b2d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b2d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b2e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b2e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b2f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b300:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b310:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b320:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b330:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b340:·643d·2269·646d·3633·3333·223e·3c74·6162··d="idm6333"><tab | |||
| 0003b350:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b360:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b370:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b380:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b390:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b3a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b3b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b3c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b3d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b3f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b400:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b410:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b420:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b430:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b440:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b450:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b460:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b470:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b480:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b490:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b4a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b4b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b4c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b4d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b4e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b4f0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b500:·3833·3238·392d·390a·2020·2d20·434a·4953··83289-9.··-·CJIS | |||
| 0003b510:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b520:·5341·2d53·5449·472d·534c·4553·2d31·352d··SA-STIG-SLES-15- | |||
| 0003b530:·3031·3034·3139·0a20·202d·204e·4953·542d··010419.··-·NIST- | |||
| 0003b540:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b550:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b560:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b570:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b580:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b590:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b5a0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b5b0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b5c0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b5d0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b5e0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b5f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b600:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b610:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b620:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b630:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b640:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | |||
| 0003b650:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | |||
| 0003b660:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b670:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b680:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b690:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b6a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b6b0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b6c0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b6d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b6e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b6f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b700:·643d·2269·646d·3633·3334·223e·3c70·7265··d="idm6334"><pre | |||
| 0003b710:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b720:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b730:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b740:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b750:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b760:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b770:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b780:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b790:·743d·2223·6964·6d36·3333·3522·2074·6162··t="#idm6335"·tab | |||
| 0003b7a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b7b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b7c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b7d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b7e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b | 0003b2f0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003b | 0003b300:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 0003b | 0003b310:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b | 0003b320:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b | 0003b330:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b | 0003b340:·6964·6d36·3333·3322·3e3c·7461·626c·6520··idm6333"><table· | ||
| 0003b | 0003b350:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b | 0003b360:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b | 0003b370:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b | 0003b380:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b | 0003b390:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b | 0003b3a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b3b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b3c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b3d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b3e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b3f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b | 0003b400:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b410:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b | 0003b420:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b | 0003b430:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b | 0003b440:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003b | 0003b450:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 0003b | 0003b460:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| Max diff block lines reached; 21176797/21194515 bytes (99.92%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·15 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·15 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 118, 14 lines modified | Offset 118, 27 lines modified | ||
| 118 | include·install_aide | 118 | include·install_aide |
| 119 | class·install_aide·{ | 119 | class·install_aide·{ |
| 120 | ··package·{·'aide': | 120 | ··package·{·'aide': |
| 121 | ····ensure·=>·'installed', | 121 | ····ensure·=>·'installed', |
| 122 | ··} | 122 | ··} |
| 123 | } | 123 | } |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 130 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 131 | zypper·install·-y·"aide" | ||
| 132 | else | ||
| 133 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 134 | fi | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | -·name:·Ensure·aide·is·installed | 140 | -·name:·Ensure·aide·is·installed |
| 130 | ··package: | 141 | ··package: |
| Offset 146, 27 lines modified | Offset 159, 14 lines modified | ||
| 146 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 147 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 149 | [[packages]] | 162 | [[packages]] |
| 150 | name·=·"aide" | 163 | name·=·"aide" |
| 151 | version·=·"*" | 164 | version·=·"*" |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 158 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 159 | zypper·install·-y·"aide" | ||
| 160 | else | ||
| 161 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 162 | fi | ||
| 163 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 164 | Run·the·following·command·to·generate·a·new·database: | 166 | Run·the·following·command·to·generate·a·new·database: |
| 165 | $·sudo·/usr/bin/aide·--init | 167 | $·sudo·/usr/bin/aide·--init |
| 166 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/ | 168 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/ |
| 167 | aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database | 169 | aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database |
| 168 | can·be·installed·as·follows: | 170 | can·be·installed·as·follows: |
| 169 | $·sudo·cp·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | 171 | $·sudo·cp·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db |
| Offset 190, 14 lines modified | Offset 190, 29 lines modified | ||
| 190 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 190 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 191 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 191 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 192 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 192 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 193 | ·············_\x8c_\x8i_\x8s············1.4.1 | 193 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 194 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 194 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 195 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 195 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 196 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 196 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 199 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 200 | zypper·-q·--no-remote·ref | ||
| 201 | zypper·install·-y·"aide" | ||
| 202 | /usr/bin/aide·--init | ||
| 203 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 204 | else | ||
| 205 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 206 | fi | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 202 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated | 212 | -·name:·Build·and·Test·AIDE·Database·-·Ensure·Repositories·Are·Updated |
| 203 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref | 213 | ··ansible.builtin.command:·zypper·-q·--no-remote·ref |
| Offset 293, 29 lines modified | Offset 308, 14 lines modified | ||
| 293 | ··-·PCI-DSSv4-11.5.2 | 308 | ··-·PCI-DSSv4-11.5.2 |
| 294 | ··-·aide_build_database | 309 | ··-·aide_build_database |
| 295 | ··-·low_complexity | 310 | ··-·low_complexity |
| 296 | ··-·low_disruption | 311 | ··-·low_disruption |
| 297 | ··-·medium_severity | 312 | ··-·medium_severity |
| 298 | ··-·no_reboot_needed | 313 | ··-·no_reboot_needed |
| 299 | ··-·restrict_strategy | 314 | ··-·restrict_strategy |
| 300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 301 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 302 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 303 | zypper·-q·--no-remote·ref | ||
| 304 | zypper·install·-y·"aide" | ||
| 305 | /usr/bin/aide·--init | ||
| 306 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 307 | else | ||
| 308 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 309 | fi | ||
| 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 315 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 311 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 316 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 312 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information | 317 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information |
| Max diff block lines reached; 1632424/1638092 bytes (99.65%) of diff not shown. | |||
| Offset 14319, 15 lines modified | Offset 14319, 15 lines modified | ||
| 00037ee0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037ee0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037ef0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037ef0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f00:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f00:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f10:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f10:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f20:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f20:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f30:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f30:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f40:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f40:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f50:·7320·6f66·2032·3032·3 | 00037f50:·7320·6f66·2032·3032·352d·3132·2d31·3129··s·of·2025-12-11) | ||
| 00037f60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f70:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f70:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f80:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f80:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037f90:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037f90:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fa0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fa0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fb0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fb0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fc0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fc0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15543, 456 lines modified | Offset 15543, 456 lines modified | ||
| 0003cb60:·612d·7461·7267·6574·3d22·2369·646d·3535··a-target="#idm55 | 0003cb60:·612d·7461·7267·6574·3d22·2369·646d·3535··a-target="#idm55 | ||
| 0003cb70:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003cb70:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003cb80:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003cb80:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003cb90:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003cb90:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003cba0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003cba0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003cbb0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003cbb0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (442 lines added, 442 lines removed) | |
| 0003cbc0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003cbc0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003cbd0:·7469·6f6e·20 | 0003cbd0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003cbe0:·7 | 0003cbe0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003cbf0:· | 0003cbf0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003cc00:·6 | 0003cc00:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003cc10:· | 0003cc10:·2220·6964·3d22·6964·6d35·3531·223e·3c70··"·id="idm551"><p | ||
| 0003cc20:· | 0003cc20:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003cc30:·6 | 0003cc30:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003cc40:·6 | 0003cc40:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003cc50:· | 0003cc50:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0003cc60:·6 | 0003cc60:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | ||
| 0003cc70:· | 0003cc70:·2070·616d·3b20·7468·656e·0a0a·7661·725f···pam;·then..var_ | ||
| 0003cc80:· | 0003cc80:·7061·7373·776f·7264·5f70·616d·5f64·656c··password_pam_del | ||
| 0003cc90:· | 0003cc90:·6179·3d27·3c61·6262·7220·7469·746c·653d··ay='<abbr·title= | ||
| 0003cca0:·2 | 0003cca0:·2266·726f·6d20·5072·6f66·696c·652f·7265··"from·Profile/re | ||
| 0003ccb0:· | 0003ccb0:·6669·6e65·2d76·616c·7565·3a20·7863·6364··fine-value:·xccd | ||
| 0003ccc0:·6 | 0003ccc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 0003ccd0:· | 0003ccd0:·2e63·6f6e·7465·6e74·5f76·616c·7565·5f76··.content_value_v | ||
| 0003cce0:· | 0003cce0:·6172·5f70·6173·7377·6f72·645f·7061·6d5f··ar_password_pam_ | ||
| 0003ccf0:·6 | 0003ccf0:·6465·6c61·7922·3e34·3030·3030·3030·3c2f··delay">4000000</ | ||
| 0003cd00:· | 0003cd00:·6162·6272·3e27·0a0a·0a69·6620·5b20·2d65··abbr>'...if·[·-e | ||
| 0003cd10:· | 0003cd10:·2022·2f65·7463·2f70·616d·2e64·2f63·6f6d···"/etc/pam.d/com | ||
| 0003cd20:·6 | 0003cd20:·6d6f·6e2d·6175·7468·2220·5d20·3b20·7468··mon-auth"·]·;·th | ||
| 0003cd30:·6 | 0003cd30:·656e·0a20·2020·2076·616c·7565·5265·6765··en.····valueRege | ||
| 0003cd40:· | 0003cd40:·783d·2224·7661·725f·7061·7373·776f·7264··x="$var_password | ||
| 0003cd50:· | 0003cd50:·5f70·616d·5f64·656c·6179·2220·6465·6661··_pam_delay"·defa | ||
| 0003cd60:· | 0003cd60:·756c·7456·616c·7565·3d22·2476·6172·5f70··ultValue="$var_p | ||
| 0003cd70:· | 0003cd70:·6173·7377·6f72·645f·7061·6d5f·6465·6c61··assword_pam_dela | ||
| 0003cd80:· | 0003cd80:·7922·0a20·2020·2023·206e·6f6e·2d65·6d70··y".····#·non-emp | ||
| 0003cd90:· | 0003cd90:·7479·2076·616c·7565·7320·6e65·6564·2074··ty·values·need·t | ||
| 0003cda0:· | 0003cda0:·6f20·6265·2070·7265·6365·6465·6420·6279··o·be·preceded·by | ||
| 0003cdb0:·616 | 0003cdb0:·2061·6e20·6571·7561·6c73·2073·6967·6e0a···an·equals·sign. | ||
| 0003cdc0:·202 | 0003cdc0:·2020·2020·5b20·2d6e·2022·247b·7661·6c75······[·-n·"${valu | ||
| 0003cdd0:· | 0003cdd0:·6552·6567·6578·7d22·205d·2026·616d·703b··eRegex}"·]·& | ||
| 0003cde0:· | 0003cde0:·2661·6d70·3b20·7661·6c75·6552·6567·6578··&·valueRegex | ||
| 0003cdf0:· | 0003cdf0:·3d22·3d24·7b76·616c·7565·5265·6765·787d··="=${valueRegex} | ||
| 0003ce00:· | 0003ce00:·220a·2020·2020·2320·6164·6420·616e·2065··".····#·add·an·e | ||
| 0003ce10:· | 0003ce10:·7175·616c·7320·7369·676e·2074·6f20·6e6f··quals·sign·to·no | ||
| 0003ce20:·656 | 0003ce20:·6e2d·656d·7074·7920·7661·6c75·6573·0a20··n-empty·values.· | ||
| 0003ce30:· | 0003ce30:·2020·205b·202d·6e20·2224·7b64·6566·6175·····[·-n·"${defau | ||
| 0003ce40:· | 0003ce40:·6c74·5661·6c75·657d·2220·5d20·2661·6d70··ltValue}"·]·& | ||
| 0003ce50:· | 0003ce50:·3b26·616d·703b·2064·6566·6175·6c74·5661··;&·defaultVa | ||
| 0003ce60:·6 | 0003ce60:·6c75·653d·223d·247b·6465·6661·756c·7456··lue="=${defaultV | ||
| 0003ce70:· | 0003ce70:·616c·7565·7d22·0a0a·2020·2020·2320·6669··alue}"..····#·fi | ||
| 0003ce80:· | 0003ce80:·7820·2774·7970·6527·2069·6620·6974·2773··x·'type'·if·it's | ||
| 0003ce90:· | 0003ce90:·2077·726f·6e67·0a20·2020·2069·6620·6772···wrong.····if·gr | ||
| 0003cea0:·6 | 0003cea0:·6570·202d·7120·2d50·2022·5e5c·5c73·2a28··ep·-q·-P·"^\\s*( | ||
| 0003ceb0:· | 0003ceb0:·3f22·2721·2722·6175·7468·5c5c·7329·5b5b··?"'!'"auth\\s)[[ | ||
| 0003cec0:· | 0003cec0:·3a61·6c6e·756d·3a5d·5d2b·5c5c·732b·5b5b··:alnum:]]+\\s+[[ | ||
| 0003ced0:· | 0003ced0:·3a61·6c6e·756d·3a5d·5d2b·5c5c·732b·7061··:alnum:]]+\\s+pa | ||
| 0003cee0:· | 0003cee0:·6d5f·6661·696c·6465·6c61·792e·736f·2220··m_faildelay.so"· | ||
| 0003cef0:· | 0003cef0:·266c·743b·2022·2f65·7463·2f70·616d·2e64··<·"/etc/pam.d | ||
| 0003cf00:· | 0003cf00:·2f63·6f6d·6d6f·6e2d·6175·7468·2220·3b20··/common-auth"·;· | ||
| 0003cf10:· | 0003cf10:·7468·656e·0a20·2020·2020·2020·2073·6564··then.········sed | ||
| 0003cf20:· | 0003cf20:·202d·2d66·6f6c·6c6f·772d·7379·6d6c·696e···--follow-symlin | ||
| 0003cf30:·6 | 0003cf30:·6b73·202d·6920·2d45·202d·6520·2273·2f5e··ks·-i·-E·-e·"s/^ | ||
| 0003cf40:· | 0003cf40:·285c·5c73·2a29·5b5b·3a61·6c6e·756d·3a5d··(\\s*)[[:alnum:] | ||
| 0003cf50:·5 | 0003cf50:·5d2b·285c·5c73·2b5b·5b3a·616c·6e75·6d3a··]+(\\s+[[:alnum: | ||
| 0003cf60:· | 0003cf60:·5d5d·2b5c·5c73·2b70·616d·5f66·6169·6c64··]]+\\s+pam_faild | ||
| 0003cf70:·6 | 0003cf70:·656c·6179·2e73·6f29·2f5c·5c31·6175·7468··elay.so)/\\1auth | ||
| 0003cf80:· | 0003cf80:·5c5c·322f·2220·222f·6574·632f·7061·6d2e··\\2/"·"/etc/pam. | ||
| 0003cf90:· | 0003cf90:·642f·636f·6d6d·6f6e·2d61·7574·6822·0a20··d/common-auth".· | ||
| 0003cfa0:· | 0003cfa0:·2020·2066·690a·0a20·2020·2023·2066·6978·····fi..····#·fix | ||
| 0003cfb0:· | 0003cfb0:·2027·636f·6e74·726f·6c27·2069·6620·6974···'control'·if·it | ||
| 0003cfc0:·2 | 0003cfc0:·2773·2077·726f·6e67·0a20·2020·2069·6620··'s·wrong.····if· | ||
| 0003cfd0:· | 0003cfd0:·6772·6570·202d·7120·2d50·2022·5e5c·5c73··grep·-q·-P·"^\\s | ||
| 0003cfe0:· | 0003cfe0:·2a61·7574·685c·5c73·2b28·3f22·2721·2722··*auth\\s+(?"'!'" | ||
| 0003cff0:·7 | 0003cff0:·7265·7175·6972·6564·295b·5b3a·616c·6e75··required)[[:alnu | ||
| 0003d000:· | 0003d000:·6d3a·5d5d·2b5c·5c73·2b70·616d·5f66·6169··m:]]+\\s+pam_fai | ||
| 0003d010:· | 0003d010:·6c64·656c·6179·2e73·6f22·2026·6c74·3b20··ldelay.so"·<· | ||
| 0003d020:· | 0003d020:·222f·6574·632f·7061·6d2e·642f·636f·6d6d··"/etc/pam.d/comm | ||
| 0003d030:· | 0003d030:·6f6e·2d61·7574·6822·203b·2074·6865·6e0a··on-auth"·;·then. | ||
| 0003d040:· | 0003d040:·2020·2020·2020·2020·7365·6420·2d2d·666f··········sed·--fo | ||
| 0003d050:· | 0003d050:·6c6c·6f77·2d73·796d·6c69·6e6b·7320·2d69··llow-symlinks·-i | ||
| 0003d060:·20 | 0003d060:·202d·4520·2d65·2022·732f·5e28·5c5c·732a···-E·-e·"s/^(\\s* | ||
| 0003d070:·6 | 0003d070:·6175·7468·5c5c·732b·295b·5b3a·616c·6e75··auth\\s+)[[:alnu | ||
| 0003d080:·6 | 0003d080:·6d3a·5d5d·2b28·5c5c·732b·7061·6d5f·6661··m:]]+(\\s+pam_fa | ||
| 0003d090:·696 | 0003d090:·696c·6465·6c61·792e·736f·292f·5c5c·3172··ildelay.so)/\\1r | ||
| 0003d0a0:·6 | 0003d0a0:·6571·7569·7265·645c·5c32·2f22·2022·2f65··equired\\2/"·"/e | ||
| 0003d0b0:· | 0003d0b0:·7463·2f70·616d·2e64·2f63·6f6d·6d6f·6e2d··tc/pam.d/common- | ||
| 0003d0c0:·6 | 0003d0c0:·6175·7468·220a·2020·2020·6669·0a0a·2020··auth".····fi..·· | ||
| 0003d0d0:· | 0003d0d0:·2020·2320·6669·7820·7468·6520·7661·6c75····#·fix·the·valu | ||
| 0003d0e0:· | 0003d0e0:·6520·666f·7220·276f·7074·696f·6e27·2069··e·for·'option'·i | ||
| 0003d0f0:·6 | 0003d0f0:·6620·6f6e·6520·6578·6973·7473·2062·7574··f·one·exists·but | ||
| 0003d100:· | 0003d100:·2064·6f65·7320·6e6f·7420·6d61·7463·6820···does·not·match· | ||
| 0003d110:· | 0003d110:·2776·616c·7565·5265·6765·7827·0a20·2020··'valueRegex'.··· | ||
| 0003d120:· | 0003d120:·2069·6620·6772·6570·202d·7120·2d50·2022···if·grep·-q·-P·" | ||
| 0003d130:· | 0003d130:·5e5c·5c73·2a61·7574·685c·5c73·2b72·6571··^\\s*auth\\s+req | ||
| 0003d140:·7 | 0003d140:·7569·7265·645c·5c73·2b70·616d·5f66·6169··uired\\s+pam_fai | ||
| 0003d150:·6 | 0003d150:·6c64·656c·6179·2e73·6f28·5c5c·732e·2b29··ldelay.so(\\s.+) | ||
| 0003d160:· | 0003d160:·3f5c·5c73·2b64·656c·6179·283f·2227·2127··?\\s+delay(?"'!' | ||
| 0003d170:·2 | 0003d170:·2224·7b76·616c·7565·5265·6765·787d·285c··"${valueRegex}(\ | ||
| 0003d180:· | 0003d180:·5c73·7c5c·2429·2922·2026·6c74·3b20·222f··\s|\$))"·<·"/ | ||
| 0003d190:· | 0003d190:·6574·632f·7061·6d2e·642f·636f·6d6d·6f6e··etc/pam.d/common | ||
| 0003d1a0:·2 | 0003d1a0:·2d61·7574·6822·203b·2074·6865·6e0a·2020··-auth"·;·then.·· | ||
| 0003d1b0:· | 0003d1b0:·2020·2020·2020·7365·6420·2d2d·666f·6c6c········sed·--foll | ||
| 0003d1c0:·7 | 0003d1c0:·6f77·2d73·796d·6c69·6e6b·7320·2d69·202d··ow-symlinks·-i·- | ||
| 0003d1d0:· | 0003d1d0:·4520·2d65·2022·732f·5e28·5c5c·732a·6175··E·-e·"s/^(\\s*au | ||
| 0003d1e0:· | 0003d1e0:·7468·5c5c·732b·7265·7175·6972·6564·5c5c··th\\s+required\\ | ||
| 0003d1f0:· | 0003d1f0:·732b·7061·6d5f·6661·696c·6465·6c61·792e··s+pam_faildelay. | ||
| 0003d200:·7 | 0003d200:·736f·285c·5c73·2e2b·293f·5c5c·7329·6465··so(\\s.+)?\\s)de | ||
| 0003d210:·6 | 0003d210:·6c61·793d·5b5e·5b3a·7370·6163·653a·5d5d··lay=[^[:space:]] | ||
| 0003d220:· | 0003d220:·2a2f·5c5c·3164·656c·6179·247b·6465·6661··*/\\1delay${defa | ||
| 0003d230:· | 0003d230:·756c·7456·616c·7565·7d2f·2220·222f·6574··ultValue}/"·"/et | ||
| Max diff block lines reached; 4820667/4883373 bytes (98.72%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:sle-microos:5.2 | 41 | ····*·cpe:/o:suse:sle-microos:5.2 |
| 42 | ····*·cpe:/o:suse:sle-micro:5.3 | 42 | ····*·cpe:/o:suse:sle-micro:5.3 |
| 43 | ····*·cpe:/o:suse:sle-micro:5.4 | 43 | ····*·cpe:/o:suse:sle-micro:5.4 |
| 44 | ····*·cpe:/o:suse:sle-micro:5.5 | 44 | ····*·cpe:/o:suse:sle-micro:5.5 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········3.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 53 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 54 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 54 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| Offset 149, 14 lines modified | Offset 149, 67 lines modified | ||
| 149 | Severity: ···medium | 149 | Severity: ···medium |
| 150 | Rule·ID:·····xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faildelay_delay | 150 | Rule·ID:·····xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faildelay_delay |
| 151 | Identifiers:·CCE-94092-4 | 151 | Identifiers:·CCE-94092-4 |
| 152 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 152 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 153 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00226 | 153 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00226 |
| 154 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-412025 | 154 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-412025 |
| 155 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261365r996541_rule | 155 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261365r996541_rule |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 157 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 158 | if·rpm·--quiet·-q·pam;·then | ||
| 159 | var_password_pam_delay='4000000' | ||
| 160 | if·[·-e·"/etc/pam.d/common-auth"·]·;·then | ||
| 161 | ····valueRegex="$var_password_pam_delay"·defaultValue="$var_password_pam_delay" | ||
| 162 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 163 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 164 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 165 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 166 | ····#·fix·'type'·if·it's·wrong | ||
| 167 | ····if·grep·-q·-P·"^\\s*(?"'!'"auth\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/ | ||
| 168 | pam.d/common-auth"·;·then | ||
| 169 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 170 | ]]+\\s+pam_faildelay.so)/\\1auth\\2/"·"/etc/pam.d/common-auth" | ||
| 171 | ····fi | ||
| 172 | ····#·fix·'control'·if·it's·wrong | ||
| 173 | ····if·grep·-q·-P·"^\\s*auth\\s+(?"'!'"required)[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/pam.d/ | ||
| 174 | common-auth"·;·then | ||
| 175 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+)[[:alnum:]]+(\\s+pam_faildelay.so)/ | ||
| 176 | \\1required\\2/"·"/etc/pam.d/common-auth" | ||
| 177 | ····fi | ||
| 178 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 179 | ····if·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay(?"'!'"${valueRegex} | ||
| 180 | (\\s|\$))"·<·"/etc/pam.d/common-auth"·;·then | ||
| 181 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so | ||
| 182 | (\\s.+)?\\s)delay=[^[:space:]]*/\\1delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 183 | ····#·add·'option=default'·if·option·is·not·set | ||
| 184 | ····elif·grep·-q·-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·&& | ||
| 185 | ············grep····-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·| | ||
| 186 | grep·-q·-E·-v·"\\sdelay(=|\\s|\$)"·;·then | ||
| 187 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so[^\\n]*)/\\1 | ||
| 188 | delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 189 | ····#·add·a·new·entry·if·none·exists | ||
| 190 | ····elif·!·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay${valueRegex} | ||
| 191 | (\\s|\$)"·<·"/etc/pam.d/common-auth"·;·then | ||
| 192 | ········echo·"auth·required·pam_faildelay.so·delay${defaultValue}"·>>·"/etc/pam.d/common-auth" | ||
| 193 | ····fi | ||
| 194 | else | ||
| 195 | ····echo·"/etc/pam.d/common-auth·doesn't·exist"·>&2 | ||
| 196 | fi | ||
| 197 | else | ||
| 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 199 | fi | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 161 | -·name:·Gather·the·package·facts | 205 | -·name:·Gather·the·package·facts |
| 162 | ··package_facts: | 206 | ··package_facts: |
| Offset 295, 80 lines modified | Offset 348, 97 lines modified | ||
| 295 | ··-·DISA-STIG-SLEM-05-412025 | 348 | ··-·DISA-STIG-SLEM-05-412025 |
| 296 | ··-·accounts_passwords_pam_faildelay_delay | 349 | ··-·accounts_passwords_pam_faildelay_delay |
| 297 | ··-·low_complexity | 350 | ··-·low_complexity |
| 298 | ··-·low_disruption | 351 | ··-·low_disruption |
| 299 | ··-·medium_severity | 352 | ··-·medium_severity |
| 300 | ··-·no_reboot_needed | 353 | ··-·no_reboot_needed |
| 301 | ··-·restrict_strategy | 354 | ··-·restrict_strategy |
| 355 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8SL\x8LE\x8EM\x8M·5\x85·m\x8mu\x8us\x8st\x8t·u\x8us\x8se\x8e·t\x8th\x8he\x8e·d\x8de\x8ef\x8fa\x8au\x8ul\x8lt\x8t·p\x8pa\x8am\x8m_\x8_t\x8ta\x8al\x8ll\x8ly\x8y2\x82·t\x8ta\x8al\x8ll\x8ly\x8y·d\x8di\x8ir\x8re\x8ec\x8ct\x8to\x8or\x8ry\x8y.\x8.·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 356 | This·rule·configures·the·system·to·use·default·pam_tally2·tally·directory | ||
| 357 | ·············By·limiting·the·number·of·failed·logon·attempts,·the·risk·of·unauthorized·system | ||
| 358 | Rationale:···access·via·user·password·guessing,·otherwise·known·as·brute-force·attacks,·is | ||
| 359 | ·············reduced.·Limits·are·imposed·by·locking·the·account. | ||
| 360 | Severity: ···medium | ||
| 361 | Rule·ID:·····xccdf_org.ssgproject.content_rule_accounts_passwords_pam_tally2_file | ||
| 362 | Identifiers:·CCE-94089-0 | ||
| 363 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000044 | ||
| 364 | ·············_\x8n_\x8i_\x8s_\x8t····AC-7(a) | ||
| 365 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000021-GPOS-00005 | ||
| 366 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-412030 | ||
| 367 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261366r996837_rule | ||
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 303 | #·Remediation·is·applicable·only·in·certain·platforms | 373 | #·Remediation·is·applicable·only·in·certain·platforms |
| 304 | if·rpm·--quiet·-q·pam;·then | 374 | if·rpm·--quiet·-q·pam;·then |
| 305 | 375 | declare·-a·VALUES=() | |
| 376 | declare·-a·VALUE_NAMES=() | ||
| 377 | declare·-a·ARGS=() | ||
| 378 | declare·-a·NEW_ARGS=() | ||
| 379 | declare·-a·DEL_ARGS=() | ||
| 380 | VALUES+=("") | ||
| 381 | VALUE_NAMES+=("") | ||
| 382 | ARGS+=("file") | ||
| 383 | NEW_ARGS+=("") | ||
| 384 | DEL_ARGS+=("file=") | ||
| 306 | if·[·-e·"/etc/pam.d/common-auth"·]·;·then | ||
| 307 | ····valueRegex="$var_password_pam_delay"·defaultValue="$var_password_pam_delay" | ||
| 308 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| Max diff block lines reached; 382245/388237 bytes (98.46%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d10:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d20:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d20:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037d30:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037d30:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037d40:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037d40:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d50:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d50:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d60:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d60:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d80:·6173·206f·6620·3230·323 | 00037d80:·6173·206f·6620·3230·3235·2d31·322d·3131··as·of·2025-12-11 | ||
| 00037d90:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d90:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037da0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037da0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037db0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037db0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037dc0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037dc0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037dd0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037dd0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037de0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037de0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037df0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037df0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16132, 173 lines modified | Offset 16132, 173 lines modified | ||
| 0003f030:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003f030:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003f040:·6d38·3633·2220·7461·6269·6e64·6578·3d22··m863"·tabindex=" | 0003f040:·6d38·3633·2220·7461·6269·6e64·6578·3d22··m863"·tabindex=" | ||
| 0003f050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003f050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003f060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003f060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003f070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003f070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003f080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003f080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003f090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003f090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003f0a0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003f0b0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003f0c0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003f0d0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003f0e0:·7073·6522·2069·643d·2269·646d·3836·3322··pse"·id="idm863" | |||
| 0003f0a0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003f0b0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003f0c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003f0d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003f0e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003f0f0:·3633·223e·3c74·6162·6c65·2063·6c61·7373··63"><table·class | |||
| 0003f100:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003f110:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003f120:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003f130:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003f140:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003f150:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003f160:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003f170:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003f180:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003f190:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003f1a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003f1b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003f1c0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 0003f1d0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 0003f | 0003f0f0:·3e3c·7072·653e·3c63·6f64·653e·0a76·6172··><pre><code>.var | ||
| 0003f1f0:·6e61·6d65·3a20·5843·4344·4620·5661·6c75··name:·XCCDF·Valu | |||
| 0003f200:·6520·7661·725f·7379·7374·656d·5f63·7279··e·var_system_cry | |||
| 0003f210:·7074·6f5f·706f·6c69·6379·2023·2070·726f··pto_policy·#·pro | |||
| 0003f220:·6d6f·7465·2074·6f20·7661·7269·6162·6c65··mote·to·variable | |||
| 0003f230:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | |||
| 0003f | 0003f100:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | ||
| 0003f110:·6f6c·6963·793d·273c·6162·6272·2074·6974··olicy='<abbr·tit | |||
| 0003f120:·6c65·3d22·6672·6f6d·2042·656e·6368·6d61··le="from·Benchma | |||
| 0003f130:·726b·2f56·616c·7565·3a20·7863·6364·665f··rk/Value:·xccdf_ | |||
| 0003f140:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | |||
| 0003f150:·6f6e·7465·6e74·5f76·616c·7565·5f76·6172··ontent_value_var | |||
| 0003f160:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003f170:·6f6c·6963·7922·3e44·4546·4155·4c54·3c2f··olicy">DEFAULT</ | |||
| 0003f180:·6162·6272·3e27·0a0a·0a73·7464·6572·725f··abbr>'...stderr_ | |||
| 0003f190:·6f66·5f63·616c·6c3d·2428·7570·6461·7465··of_call=$(update | |||
| 0003f1a0:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | |||
| 0003f250:·746f·5f70·6f6c·6963·793a·2021·2173·7472··to_policy:·!!str | |||
| 0003f260:·203c·6162·6272·2074·6974·6c65·3d22·6672···<abbr·title="fr | |||
| 0003f270:·6f6d·2042·656e·6368·6d61·726b·2f56·616c··om·Benchmark/Val | |||
| 0003f280:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 0003f290:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 0003f2a0:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | |||
| 0003f2b0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | |||
| 0003f2c0:·3e44·4546·4155·4c54·3c2f·6162·6272·3e0a··>DEFAULT</abbr>. | |||
| 0003f2d0:·2020·7461·6773·3a0a·2020·2020·2d20·616c····tags:.····-·al | |||
| 0003f2e0:·7761·7973·0a0a·2d20·6e61·6d65·3a20·436f··ways..-·name:·Co | |||
| 0003f2f0:·6e66·6967·7572·6520·5379·7374·656d·2043··nfigure·System·C | |||
| 0003f300:·7279·7074·6f67·7261·7068·7920·506f·6c69··ryptography·Poli | |||
| 0003f310:·6379·0a20·206c·696e·6569·6e66·696c·653a··cy.··lineinfile: | |||
| 0003f320:·0a20·2020·2070·6174·683a·202f·6574·632f··.····path:·/etc/ | |||
| 0003f330:·6372·7970·746f·2d70·6f6c·6963·6965·732f··crypto-policies/ | |||
| 0003f340:·636f·6e66·6967·0a20·2020·2072·6567·6578··config.····regex | |||
| 0003f350:·703a·205e·283f·2123·2928·5c53·2b29·240a··p:·^(?!#)(\S+)$. | |||
| 0003f360:·2020·2020·6c69·6e65·3a20·277b·7b20·7661······line:·'{{·va | |||
| 0003f370:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 0003f380:·706f·6c69·6379·207d·7d27·0a20·2020·2063··policy·}}'.····c | |||
| 0003f390:·7265·6174·653a·2074·7275·650a·2020·7461··reate:·true.··ta | |||
| 0003f3a0:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 0003f3b0:·2d35·332d·4143·2d31·3728·3229·0a20·202d··-53-AC-17(2).··- | |||
| 0003f3c0:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | |||
| 0003f3d0:·3137·2861·290a·2020·2d20·4e49·5354·2d38··17(a).··-·NIST-8 | |||
| 0003f3e0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003f3f0:·2d20·4e49·5354·2d38·3030·2d35·332d·4d41··-·NIST-800-53-MA | |||
| 0003f400:·2d34·2836·290a·2020·2d20·4e49·5354·2d38··-4(6).··-·NIST-8 | |||
| 0003f410:·3030·2d35·332d·5343·2d31·3228·3229·0a20··00-53-SC-12(2).· | |||
| 0003f420:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003f430:·432d·3132·2833·290a·2020·2d20·4e49·5354··C-12(3).··-·NIST | |||
| 0003f440:·2d38·3030·2d35·332d·5343·2d31·330a·2020··-800-53-SC-13.·· | |||
| 0003f450:·2d20·5043·492d·4453·5376·342d·322e·322e··-·PCI-DSSv4-2.2. | |||
| 0003f460:·370a·2020·2d20·636f·6e66·6967·7572·655f··7.··-·configure_ | |||
| 0003f470:·6372·7970·746f·5f70·6f6c·6963·790a·2020··crypto_policy.·· | |||
| 0003f480:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| 0003f490:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003f4a0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003f4b0:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | |||
| 0003f4c0:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 0003f4d0:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 0003f4e0:·0a0a·2d20·6e61·6d65·3a20·5665·7269·6679··..-·name:·Verify | |||
| 0003f4f0:·2074·6861·7420·4372·7970·746f·2050·6f6c···that·Crypto·Pol | |||
| 0003f500:·6963·7920·6973·2053·6574·2028·7275·6e74··icy·is·Set·(runt | |||
| 0003f510:·696d·6529·0a20·2063·6f6d·6d61·6e64·3a20··ime).··command:· | |||
| 0003f520:·2f75·7372·2f62·696e·2f75·7064·6174·652d··/usr/bin/update- | |||
| 0003f530:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | |||
| 0003f | 0003f1b0:·202d·2d73·6574·2024·7b76·6172·5f73·7973···--set·${var_sys | ||
| 0003f | 0003f1c0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003f560:·7920·7d7d·0a20·2074·6167·733a·0a20·202d··y·}}.··tags:.··- | |||
| 0003f570:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | |||
| 0003f580:·3137·2832·290a·2020·2d20·4e49·5354·2d38··17(2).··-·NIST-8 | |||
| 0003f590:·3030·2d35·332d·4143·2d31·3728·6129·0a20··00-53-AC-17(a).· | |||
| 0003f5a0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003f5b0:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 0003f5c0:·3830·302d·3533·2d4d·412d·3428·3629·0a20··800-53-MA-4(6).· | |||
| 0003f5d0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003f5e0:·432d·3132·2832·290a·2020·2d20·4e49·5354··C-12(2).··-·NIST | |||
| 0003f5f0:·2d38·3030·2d35·332d·5343·2d31·3228·3329··-800-53-SC-12(3) | |||
| 0003f600:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003f610:·2d53·432d·3133·0a20·202d·2050·4349·2d44··-SC-13.··-·PCI-D | |||
| 0003f620:·5353·7634·2d32·2e32·2e37·0a20·202d·2063··SSv4-2.2.7.··-·c | |||
| Max diff block lines reached; 76422/100074 bytes (76.37%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·UnionTech·OS·Server·20 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·UnionTech·OS·Server·20 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:uos:uniontech_os_server:20 | 43 | ····*·cpe:/o:uos:uniontech_os_server:20 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-12-11) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 275, 14 lines modified | Offset 275, 34 lines modified | ||
| 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 276 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 276 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 277 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4), | 277 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4), |
| 278 | ·····················FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 278 | ·····················FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS- | 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS- |
| 280 | ·····················000394-GPOS-00174 | 280 | ·····················000394-GPOS-00174 |
| 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 283 | var_system_crypto_policy='DEFAULT' | ||
| 284 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/ | ||
| 285 | dev/null) | ||
| 286 | rc=$? | ||
| 287 | if·test·"$rc"·=·127;·then | ||
| 288 | » echo·"$stderr_of_call"·>&2 | ||
| 289 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 290 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 291 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 292 | » false··#·end·with·an·error·code | ||
| 293 | elif·test·"$rc"·!=·0;·then | ||
| 294 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 295 | » false··#·end·with·an·error·code | ||
| 296 | fi | ||
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 283 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 284 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 285 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 286 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 287 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 302 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 288 | ··set_fact: | 303 | ··set_fact: |
| Offset 325, 34 lines modified | Offset 345, 14 lines modified | ||
| 325 | ··-·PCI-DSSv4-2.2.7 | 345 | ··-·PCI-DSSv4-2.2.7 |
| 326 | ··-·configure_crypto_policy | 346 | ··-·configure_crypto_policy |
| 327 | ··-·high_severity | 347 | ··-·high_severity |
| 328 | ··-·low_complexity | 348 | ··-·low_complexity |
| 329 | ··-·low_disruption | 349 | ··-·low_disruption |
| 330 | ··-·no_reboot_needed | 350 | ··-·no_reboot_needed |
| 331 | ··-·restrict_strategy | 351 | ··-·restrict_strategy |
| 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 333 | var_system_crypto_policy='DEFAULT' | ||
| 334 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/ | ||
| 335 | dev/null) | ||
| 336 | rc=$? | ||
| 337 | if·test·"$rc"·=·127;·then | ||
| 338 | » echo·"$stderr_of_call"·>&2 | ||
| 339 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 340 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 341 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 342 | » false··#·end·with·an·error·code | ||
| 343 | elif·test·"$rc"·!=·0;·then | ||
| 344 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 345 | » false··#·end·with·an·error·code | ||
| 346 | fi | ||
| 347 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 352 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 348 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 353 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 349 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set | 354 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set |
| 350 | up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured | 355 | up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured |
| 351 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies | 356 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies |
| 352 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists, | 357 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists, |
| 353 | Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. | 358 | Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. |
| Offset 360, 14 lines modified | Offset 360, 22 lines modified | ||
| 360 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. | 360 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 361 | Severity: ··high | 361 | Severity: ··high |
| 362 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy | 362 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy |
| 363 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 | 363 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 |
| 364 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 364 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 365 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 365 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 366 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 | 366 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 372 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 373 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 372 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy | 379 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy |
| 373 | ··file: | 380 | ··file: |
| Offset 380, 22 lines modified | Offset 388, 14 lines modified | ||
| 380 | ··-·NIST-800-53-SC-13 | 388 | ··-·NIST-800-53-SC-13 |
| 381 | ··-·configure_kerberos_crypto_policy | 389 | ··-·configure_kerberos_crypto_policy |
| 382 | ··-·configure_strategy | 390 | ··-·configure_strategy |
| 383 | ··-·high_severity | 391 | ··-·high_severity |
| 384 | ··-·low_complexity | 392 | ··-·low_complexity |
| 385 | ··-·low_disruption | 393 | ··-·low_disruption |
| 386 | ··-·reboot_required | 394 | ··-·reboot_required |
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 392 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 393 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 394 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 395 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 395 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 396 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 396 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan | 397 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan |
| Max diff block lines reached; 8436/14638 bytes (57.63%) of diff not shown. | |||
| Offset 121, 216 lines modified | Offset 121, 216 lines modified | ||
| 00000780:·6c20·746f·2075·6e69·6e74·656e·7469·6f6e··l·to·unintention | 00000780:·6c20·746f·2075·6e69·6e74·656e·7469·6f6e··l·to·unintention | ||
| 00000790:·616c·6c79·2065·7865·6375·7465·2063·6f64··ally·execute·cod | 00000790:·616c·6c79·2065·7865·6375·7465·2063·6f64··ally·execute·cod | ||
| 000007a0:·6520·696e·206c·6573·7320·7072·6976·696c··e·in·less·privil | 000007a0:·6520·696e·206c·6573·7320·7072·6976·696c··e·in·less·privil | ||
| 000007b0:·6567·6564·206d·656d·6f72·7920·7370·6163··eged·memory·spac | 000007b0:·6567·6564·206d·656d·6f72·7920·7370·6163··eged·memory·spac | ||
| 000007c0:·652e·0a20·2020·2020·203c·2f74·643e·0a20··e..······</td>.· | 000007c0:·652e·0a20·2020·2020·203c·2f74·643e·0a20··e..······</td>.· | ||
| 000007d0:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | 000007d0:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | ||
| 000007e0:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | 000007e0:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | ||
| 000007f0:·7464·3e0a·2020·2020·2020·3c74·643e· | 000007f0:·7464·3e0a·2020·2020·2020·3c74·643e·5072··td>.······<td>Pr | ||
| 00000800:·6566·6572·2074·6f20·7573·6520·6120·3634··efer·to·use·a·64 | |||
| 00000810:·2d62·6974·204f·7065·7261·7469·6e67·2053··-bit·Operating·S | |||
| 00000800:·7374·616c·6c20·7468·6520·6472·6163·7574··stall·the·dracut | |||
| 00000810:·2d66·6970·732d·6165·736e·6920·5061·636b··-fips-aesni·Pack | |||
| 00000820:·6167·653c·2f74·643e·0a20·2020·2020·203c··age</td>.······< | |||
| 00000830:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | |||
| 00000840:·5553·223e·0a20·2020·2020·2020·2054·6f20··US">.········To· | |||
| 00000850:·656e·6162·6c65·2046·4950·5320·6f6e·2073··enable·FIPS·on·s | |||
| 000008 | 00000820:·7973·7465·6d20·7768·656e·2073·7570·706f··ystem·when·suppo | ||
| 00000870:·7274·2074·6865·2041·6476·616e·6365·6420··rt·the·Advanced· | |||
| 00000880:·456e·6372·7970·7469·6f6e·2053·7461·6e64··Encryption·Stand | |||
| 00000890:·6172·6420·2841·4553·2920·6f72·204e·6577··ard·(AES)·or·New | |||
| 000008a0:·0a49·6e73·7472·7563·7469·6f6e·7320·2841··.Instructions·(A | |||
| 000008b0:·4553·2d4e·4929·2065·6e67·696e·652c·2074··ES-NI)·engine,·t | |||
| 000008c0:·6865·2073·7973·7465·6d20·7265·7175·6972··he·system·requir | |||
| 000008d0:·6573·2074·6861·7420·7468·6520·3c74·743e··es·that·the·<tt> | |||
| 000008e0:·6472·6163·7574·2d66·6970·732d·6165·736e··dracut-fips-aesn | |||
| 000008f0:·693c·2f74·743e·0a70·6163·6b61·6765·2062··i</tt>.package·b | |||
| 00000900:·6520·696e·7374·616c·6c65·642e·0a54·6865··e·installed..The | |||
| 00000910:·203c·636f·6465·3e64·7261·6375·742d·6669···<code>dracut-fi | |||
| 00000920:·7073·2d61·6573·6e69·3c2f·636f·6465·3e20··ps-aesni</code>· | |||
| 00000930:·7061·636b·6167·6520·6361·6e20·6265·2069··package·can·be·i | |||
| 00000940:·6e73·7461·6c6c·6564·2077·6974·6820·7468··nstalled·with·th | |||
| 00000950:·6520·666f·6c6c·6f77·696e·6720·636f·6d6d··e·following·comm | |||
| 00000960:·616e·643a·0a3c·7072·653e·0a24·2073·7564··and:.<pre>.$·sud | |||
| 00000970:·6f20·7975·6d20·696e·7374·616c·6c20·6472··o·yum·install·dr | |||
| 00000980:·6163·7574·2d66·6970·732d·6165·736e·693c··acut-fips-aesni< | |||
| 00000990:·2f70·7265·3e0a·2020·2020·2020·3c2f·7464··/pre>.······</td | |||
| 000009a0:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 000009b0:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 000009c0:·2020·2020·2020·5573·6520·6f66·2077·6561········Use·of·wea | |||
| 000009d0:·6b20·6f72·2075·6e74·6573·7465·6420·656e··k·or·untested·en | |||
| 000009e0:·6372·7970·7469·6f6e·2061·6c67·6f72·6974··cryption·algorit | |||
| 000009f0:·686d·7320·756e·6465·726d·696e·6573·2074··hms·undermines·t | |||
| 00000a00:·6865·2070·7572·706f·7365·7320·6f66·2075··he·purposes·of·u | |||
| 00000a10:·7469·6c69·7a69·6e67·2065·6e63·7279·7074··tilizing·encrypt | |||
| 00000a20:·696f·6e20·746f·0a70·726f·7465·6374·2064··ion·to.protect·d | |||
| 00000a30:·6174·612e·2054·6865·206f·7065·7261·7469··ata.·The·operati | |||
| 00000a40:·6e67·2073·7973·7465·6d20·6d75·7374·2069··ng·system·must·i | |||
| 00000a50:·6d70·6c65·6d65·6e74·2063·7279·7074·6f67··mplement·cryptog | |||
| 00000a60:·7261·7068·6963·206d·6f64·756c·6573·2061··raphic·modules·a | |||
| 00000a70:·6468·6572·696e·6720·746f·2074·6865·2068··dhering·to·the·h | |||
| 00000a80:·6967·6865·720a·7374·616e·6461·7264·7320··igher.standards· | |||
| 00000a90:·6170·7072·6f76·6564·2062·7920·7468·6520··approved·by·the· | |||
| 00000aa0:·6665·6465·7261·6c20·676f·7665·726e·6d65··federal·governme | |||
| 00000ab0:·6e74·2073·696e·6365·2074·6869·7320·7072··nt·since·this·pr | |||
| 00000ac0:·6f76·6964·6573·2061·7373·7572·616e·6365··ovides·assurance | |||
| 00000ad0:·2074·6865·7920·6861·7665·2062·6565·6e20···they·have·been· | |||
| 00000ae0:·7465·7374·6564·0a61·6e64·2076·616c·6964··tested.and·valid | |||
| 00000af0:·6174·6564·2e0a·2020·2020·2020·3c2f·7464··ated..······</td | |||
| 00000b00:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | |||
| 00000b10:·3c74·723e·0a20·2020·2020·203c·7464·3e52··<tr>.······<td>R | |||
| 00000b20:·313c·2f74·643e·0a20·2020·2020·203c·7464··1</td>.······<td | |||
| 00000b30:·3e45·6e73·7572·6520·534d·4150·2069·7320··>Ensure·SMAP·is· | |||
| 00000b40:·6e6f·7420·6469·7361·626c·6564·2064·7572··not·disabled·dur | |||
| 00000b50:·696e·6720·626f·6f74·3c2f·7464·3e0a·2020··ing·boot</td>.·· | |||
| 00000b60:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | |||
| 00000b70:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | |||
| 00000b80:·2020·5468·6520·534d·4150·2069·7320·7573····The·SMAP·is·us | |||
| 00000b90:·6564·2074·6f20·7072·6576·656e·7420·7468··ed·to·prevent·th | |||
| 00000ba0:·6520·7375·7065·7276·6973·6f72·206d·6f64··e·supervisor·mod | |||
| 00000bb0:·6520·6672·6f6d·2075·6e69·6e74·656e·7469··e·from·unintenti | |||
| 00000bc0:·6f6e·616c·6c79·2072·6561·6469·6e67·2f77··onally·reading/w | |||
| 00000bd0:·7269·7469·6e67·2069·6e74·6f0a·6d65·6d6f··riting·into.memo | |||
| 00000be0:·7279·2070·6167·6573·2069·6e20·7468·6520··ry·pages·in·the· | |||
| 00000bf0:·7573·6572·2073·7061·6365·2c20·6974·2069··user·space,·it·i | |||
| 00000c00:·7320·656e·6162·6c65·6420·6279·2064·6566··s·enabled·by·def | |||
| 00000c10:·6175·6c74·2073·696e·6365·204c·696e·7578··ault·since·Linux | |||
| 00000c20:·206b·6572·6e65·6c20·332e·372e·0a42·7574···kernel·3.7..But | |||
| 00000c30:·2069·7420·636f·756c·6420·6265·2064·6973···it·could·be·dis | |||
| 00000c40:·6162·6c65·6420·7468·726f·7567·6820·6b65··abled·through·ke | |||
| 00000c50:·726e·656c·2062·6f6f·7420·7061·7261·6d65··rnel·boot·parame | |||
| 00000c60:·7465·7273·2e0a·0a45·6e73·7572·6520·7468··ters...Ensure·th | |||
| 00000c70:·6174·2053·7570·6572·7669·736f·7220·4d6f··at·Supervisor·Mo | |||
| 00000c80:·6465·2041·6363·6573·7320·5072·6576·656e··de·Access·Preven | |||
| 00000c90:·7469·6f6e·2028·534d·4150·2920·6973·206e··tion·(SMAP)·is·n | |||
| 00000ca0:·6f74·2064·6973·6162·6c65·6420·6279·0a74··ot·disabled·by.t | |||
| 00000cb0:·6865·203c·7474·3e6e·6f73·6d61·703c·2f74··he·<tt>nosmap</t | |||
| 00000cc0:·743e·2062·6f6f·7420·7061·7261·6d65·6e74··t>·boot·parament | |||
| 00000cd0:·6572·206f·7074·696f·6e2e·0a0a·4368·6563··er·option...Chec | |||
| 00000ce0:·6b20·7468·6174·2074·6865·206c·696e·6520··k·that·the·line· | |||
| 00000cf0:·3c70·7265·3e47·5255·425f·434d·444c·494e··<pre>GRUB_CMDLIN | |||
| 00000d00:·455f·4c49·4e55·583d·222e·2e2e·223c·2f70··E_LINUX="..."</p | |||
| 00000d10:·7265·3e20·7769·7468·696e·203c·7474·3e2f··re>·within·<tt>/ | |||
| 00000d20:·6574·632f·6465·6661·756c·742f·6772·7562··etc/default/grub | |||
| 00000d30:·3c2f·7474·3e0a·646f·6573·6e27·7420·636f··</tt>.doesn't·co | |||
| 00000d40:·6e74·6169·6e20·7468·6520·6172·6775·6d65··ntain·the·argume | |||
| 00000d50:·6e74·203c·7474·3e6e·6f73·6d61·703c·2f74··nt·<tt>nosmap</t | |||
| 00000d60:·743e·2e0a·5275·6e20·7468·6520·666f·6c6c··t>..Run·the·foll | |||
| 00000d70:·6f77·696e·6720·636f·6d6d·616e·6420·746f··owing·command·to | |||
| 00000d80:·2075·7064·6174·6520·636f·6d6d·616e·6420···update·command· | |||
| 00000d90:·6c69·6e65·2066·6f72·2061·6c72·6561·6479··line·for·already | |||
| 00000da0:·2069·6e73·7461·6c6c·6564·206b·6572·6e65···installed·kerne | |||
| 00000db0:·6c73·3a0a·3c70·7265·3e23·2067·7275·6262··ls:.<pre>#·grubb | |||
| 00000dc0:·7920·2d2d·7570·6461·7465·2d6b·6572·6e65··y·--update-kerne | |||
| 00000dd0:·6c3d·414c·4c20·2d2d·7265·6d6f·7665·2d61··l=ALL·--remove-a | |||
| 00000de0:·7267·733d·226e·6f73·6d61·7022·3c2f·7072··rgs="nosmap"</pr | |||
| 00000df0:·653e·0a20·2020·2020·203c·2f74·643e·0a20··e>.······</td>.· | |||
| 00000e00:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | |||
| 00000e10:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | |||
| 00000e20:·2020·2044·6973·6162·6c69·6e67·2053·4d41·····Disabling·SMA | |||
| 00000e30:·5020·6361·6e20·6661·6369·6c69·7461·7465··P·can·facilitate | |||
| 00000e40:·2065·7870·6c6f·6974·6174·696f·6e20·6f66···exploitation·of | |||
| 00000e50:·2076·756c·6e65·7261·6269·6c69·7469·6573···vulnerabilities | |||
| 00000e60:·2063·6175·7365·6420·6279·2075·6e69·6e74···caused·by·unint | |||
| 00000e70:·656e·6465·6420·6163·6365·7373·2061·6e64··ended·access·and | |||
| 00000e80:·0a6d·616e·6970·756c·6174·696f·6e20·6f66··.manipulation·of | |||
| 00000e90:·2064·6174·6120·696e·2074·6865·2075·7365···data·in·the·use | |||
| 00000ea0:·7220·7370·6163·652e·0a20·2020·2020·203c··r·space..······< | |||
| 00000eb0:·2f74·643e·0a20·2020·203c·2f74·723e·0a20··/td>.····</tr>.· | |||
| 00000ec0:·2020·203c·7472·3e0a·2020·2020·2020·3c74·····<tr>.······<t | |||
| 00000 | 00000830:·7274·6564·3c2f·7464·3e0a·2020·2020·2020··rted</td>.······ | ||
| 00000ee0:·3c74·643e·5072·6566·6572·2074·6f20·7573··<td>Prefer·to·us | |||
| 00000ef0:·6520·6120·3634·2d62·6974·204f·7065·7261··e·a·64-bit·Opera | |||
| 00000f00:·7469·6e67·2053·7973·7465·6d20·7768·656e··ting·System·when | |||
| 00000f10:·2073·7570·706f·7274·6564·3c2f·7464·3e0a···supported</td>. | |||
| 00000f20:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | |||
| 00000f30:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | |||
| 00000f40:·2020·2020·5072·6566·6572·2069·6e73·7461······Prefer·insta | |||
| Max diff block lines reached; 2941942/2970394 bytes (99.04%) of diff not shown. | |||
| Offset 15, 39 lines modified | Offset 15, 14 lines modified | ||
| 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 17 | ······························argument·nosmep.·Run·the·following·command | 17 | ······························argument·nosmep.·Run·the·following·command |
| 18 | ······························to·update·command·line·for·already·installed | 18 | ······························to·update·command·line·for·already·installed |
| 19 | ······························kernels: | 19 | ······························kernels: |
| 20 | ······························#·grubby·--update-kernel=ALL·--remove- | 20 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 21 | ······························args="nosmep" | 21 | ······························args="nosmep" |
| 22 | ···········································································Use·of·weak·or·untested·encryption | ||
| 23 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 24 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 25 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 26 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 27 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 28 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 29 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 30 | ···········································································validated. | ||
| 31 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 32 | ······························mode·from·unintentionally·reading/writing | ||
| 33 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 34 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 35 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 36 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 37 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 38 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 39 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 40 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 41 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 42 | ······························argument·nosmap.·Run·the·following·command | ||
| 43 | ······························to·update·command·line·for·already·installed | ||
| 44 | ······························kernels: | ||
| 45 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 46 | ······························args="nosmap" | ||
| 47 | ···········································································Use·of·a·64-bit·operating·system | 22 | ···········································································Use·of·a·64-bit·operating·system |
| 48 | ···········································································offers·a·few·advantages,·like·a·larger | 23 | ···········································································offers·a·few·advantages,·like·a·larger |
| 49 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | 24 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space |
| 50 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | 25 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and |
| 51 | ····supported······························································systematic·presence·of·No·eXecute·and | 26 | ····supported······························································systematic·presence·of·No·eXecute·and |
| 52 | ···········································································Execute·Disable·(NX/XD)·protection | 27 | ···········································································Execute·Disable·(NX/XD)·protection |
| 53 | ···········································································bits. | 28 | ···········································································bits. |
| Offset 62, 14 lines modified | Offset 37, 39 lines modified | ||
| 62 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 37 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 63 | ······························installed·with·the·following·command:········(NX)·support. | 38 | ······························installed·with·the·following·command:········(NX)·support. |
| 64 | ······························$·sudo·yum·install·kernel-PAE | 39 | ······························$·sudo·yum·install·kernel-PAE |
| 65 | ······························The·installation·process·should·also·have | 40 | ······························The·installation·process·should·also·have |
| 66 | ······························configured·the·bootloader·to·load·the·new | 41 | ······························configured·the·bootloader·to·load·the·new |
| 67 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 42 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 68 | ······························modify·/etc/default/grub·if·necessary. | 43 | ······························modify·/etc/default/grub·if·necessary. |
| 44 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 45 | ······························mode·from·unintentionally·reading/writing | ||
| 46 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 47 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 48 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 49 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 50 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 51 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 52 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 53 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 54 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 55 | ······························argument·nosmap.·Run·the·following·command | ||
| 56 | ······························to·update·command·line·for·already·installed | ||
| 57 | ······························kernels: | ||
| 58 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 59 | ······························args="nosmap" | ||
| 60 | ···········································································Use·of·weak·or·untested·encryption | ||
| 61 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 68 | ···········································································validated. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 45 lines modified | Offset 99, 59 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·poisoning·of·SLUB/SLAB·objects, | ||
| 107 | ······························add·the·argument·slub_debug=P·to·the·default | ||
| 108 | ······························GRUB·2·command·line·for·the·Linux·operating··Poisoning·writes·an·arbitrary·value·to | ||
| 109 | ······························system.·To·ensure·that·slub_debug=P·is·added·freed·objects,·so·any·modification·or | ||
| 106 | ······························Certain·CPUs·are·vulnerable·to·an·exploit | ||
| 107 | ······························against·a·common·wide·industry·wide | ||
| 108 | ······························performance·optimization·known·as | ||
| 109 | ······························Speculative·Store·Bypass·(SSB).·In·such | ||
| 110 | ······························cases,·recent·stores·to·the·same·memory | ||
| 111 | ······························location·cannot·always·be·observed·by·later | ||
| 112 | ······························loads·during·speculative·execution.·However, | ||
| 113 | ······························such·stores·are·unlikely·and·thus·they·can | ||
| 114 | ······························be·detected·prior·to·instruction·retirement | ||
| 115 | ······························at·the·end·of·a·particular·speculation | ||
| 116 | ······························execution·window.·Since·Linux·Kernel·4.17 | ||
| 117 | ······························you·can·check·the·SSB·mitigation·state·with | ||
| 118 | ······························the·following·command:·cat·/sys/devices/·····In·vulnerable·processsors,·the | ||
| 119 | ······························system/cpu/vulnerabilities/spec_store_bypass·speculatively·forwarded·store·can·be | ||
| 120 | ····Configure·Speculative·····Select·the·appropriate·SSB·state·by·adding···used·in·a·cache·side·channel·attack. | ||
| 121 | R8··Store·Bypass·Mitigation···the·argument·spec_store_bypass_disable=prctl·An·example·of·this·is·reading·memory | ||
| 122 | ······························to·the·default·GRUB·2·command·line·for·the···to·which·the·attacker·does·not | ||
| 123 | ······························Linux·operating·system.·To·ensure·that·······directly·have·access,·for·example | ||
| 124 | ······························spec_store_bypass_disable=prctl·is·added·as··inside·the·sandboxed·code. | ||
| 125 | ······························a·kernel·command·line·argument·to·newly | 110 | ······························as·a·kernel·command·line·argument·to·newly···reference·to·that·object·after·being |
| 111 | ······························installed·kernels,·add·slub_debug=P·to·the···freed·or·before·being·initialized·will | ||
| 112 | R8··Enable·SLUB/SLAB··········default·Grub2·command·line·for·Linux·········be·detected·and·prevented.·This | ||
| 113 | ····allocator·poisoning·······operating·systems.·Modify·the·line·within·/··prevents·many·types·of·use-after-free | ||
| 114 | ······························etc/default/grub·as·shown·below:·············vulnerabilities·at·little·performance | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·slub_debug=P·..."····cost.·Also·prevents·leak·of·data·and | ||
| 116 | ······························Run·the·following·command·to·update·command··detection·of·corrupted·memory. | ||
| 126 | ······························installed·kernels | 117 | ······························line·for·already·installed·kernels: |
| 127 | ······························spec_store_bypass_disable=prctl·to·the | ||
| 128 | ······························ | 118 | ······························#·grubby·--update-kernel=ALL·-- |
| 119 | ······························args="slub_debug=P" | ||
| 120 | ······························L1·Terminal·Fault·(L1TF)·is·a·hardware | ||
| 121 | ······························vulnerability·which·allows·unprivileged | ||
| 122 | ······························speculative·access·to·data·which·is | ||
| 123 | ······························available·in·the·Level·1·Data·Cache·when·the | ||
| 124 | ······························page·table·entry·isn't·present.·Select·the | ||
| 125 | ······························appropriate·mitigation·by·adding·the | ||
| Max diff block lines reached; 652940/665429 bytes (98.12%) of diff not shown. | |||
| Offset 40, 71 lines modified | Offset 40, 32 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Oracle·Linux·7's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1</td> | ||
| 74 | ······<td>Disable·GDM·Guest·Login</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·login·without·credentials | ||
| 77 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 78 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 79 | timed·logins·or·guest·account·access,·set·the·<tt>TimedLoginEnable</tt>·to·<tt>false</tt>·in | ||
| 80 | the·<tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 81 | <pre>[daemon] | ||
| 82 | TimedLoginEnable=false</pre> | ||
| 83 | ······</td> | ||
| 84 | ······<td·xml:lang="en-US"> | ||
| 85 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 86 | system·security. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 90 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 91 | ······<td> | 48 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 92 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 93 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 94 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 95 | <pre>vc/1 | ||
| 96 | vc/2 | ||
| 97 | vc/3 | ||
| 98 | 50 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | |
| 51 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 52 | their·UID·changed. | ||
| 53 | <br·/> | ||
| 54 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 55 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 56 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 57 | assigned. | ||
| 99 | ······</td> | 58 | ······</td> |
| 100 | ······<td·xml:lang="en-US"> | 59 | ······<td·xml:lang="en-US"> |
| 101 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 102 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 103 | usi | 60 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts |
| 61 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 62 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 63 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 64 | access·to·root·privileges·in·an·accountable·manner. | ||
| 104 | ······</td> | 65 | ······</td> |
| 105 | ····</tr> | 66 | ····</tr> |
| 106 | ····<tr> | 67 | ····<tr> |
| 107 | ······<td>3.1.1<br/>3.1.5</td> | 68 | ······<td>3.1.1<br/>3.1.5</td> |
| 108 | ······<td>Disable·SSH·Root·Login</td> | 69 | ······<td>Disable·SSH·Root·Login</td> |
| 109 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 110 | ········The·root·user·should·never·be·allowed·to·login·to·a | 71 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| Offset 121, 32 lines modified | Offset 82, 28 lines modified | ||
| 121 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | 82 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. |
| 122 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 83 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 123 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 84 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 124 | direct·attack·attempts·on·root's·password. | 85 | direct·attack·attempts·on·root's·password. |
| 125 | ······</td> | 86 | ······</td> |
| 126 | ····</tr> | 87 | ····</tr> |
| 127 | ····<tr> | 88 | ····<tr> |
| 128 | ······<td>3.1.1<br/>3. | 89 | ······<td>3.1.1<br/>3.4.5</td> |
| 129 | ······<td> | 90 | ······<td>Require·Authentication·for·Emergency·Systemd·Target</td> |
| 130 | ······<td·xml:lang="en-US"> | 91 | ······<td·xml:lang="en-US"> |
| 92 | ········Emergency·mode·is·intended·as·a·system·recovery | ||
| 93 | method,·providing·a·single·user·root·access·to·the·system | ||
| 94 | during·a·failed·boot·sequence. | ||
| 95 | <br·/><br·/> | ||
| 96 | By·default,·Emergency·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 97 | in·<tt>/usr/lib/systemd/system/emergency.service</tt>. | ||
| 131 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 132 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 133 | their·UID·changed. | ||
| 134 | <br·/> | ||
| 135 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 136 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 137 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 138 | assigned. | ||
| 139 | ······</td> | 98 | ······</td> |
| 140 | ······<td·xml:lang="en-US"> | 99 | ······<td·xml:lang="en-US"> |
| 100 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 101 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 102 | by·configuring·the·bootloader·password. | ||
| 141 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 142 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 143 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 144 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 145 | access·to·root·privileges·in·an·accountable·manner. | ||
| 146 | ······</td> | 103 | ······</td> |
| 147 | ····</tr> | 104 | ····</tr> |
| 148 | ····<tr> | 105 | ····<tr> |
| 149 | ······<td>3.1.1</td> | 106 | ······<td>3.1.1</td> |
| 150 | ······<td>Disable·GDM·Automatic·Login</td> | 107 | ······<td>Disable·GDM·Automatic·Login</td> |
| 151 | ······<td·xml:lang="en-US"> | 108 | ······<td·xml:lang="en-US"> |
| 152 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | 109 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| Offset 159, 43 lines modified | Offset 116, 28 lines modified | ||
| 159 | ······</td> | 116 | ······</td> |
| 160 | ······<td·xml:lang="en-US"> | 117 | ······<td·xml:lang="en-US"> |
| Max diff block lines reached; 451019/456934 bytes (98.71%) of diff not shown. | |||
| Offset 1, 48 lines modified | Offset 1, 31 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of |
| 2 | Oracle·Linux·7 | 2 | Oracle·Linux·7 |
| 3 | ·······································To·further·limit·access·to·the·root·account, | ||
| 4 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 5 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 6 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 7 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 8 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 9 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 10 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 11 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 12 | ·······································plain·text·over·the·network.·By·default,·Oracle·Linux··login,·then·escalate | ||
| 13 | ·······································7's·/etc/securetty·file·only·allows·the·root·user·to···to·privileged·(root) | ||
| 14 | ·······································login·at·the·console·physically·attached·to·the········access·via·su·/ | ||
| 15 | ·······································system.·To·prevent·root·from·logging·in,·remove·the····sudo.·This·is | ||
| 16 | ·······································contents·of·this·file.·To·prevent·direct·root·logins,··required·for·FISMA | ||
| 17 | ·······································remove·the·contents·of·this·file·by·typing·the·········Low·and·FISMA | ||
| 18 | ·······································following·command:·····································Moderate·systems. | ||
| 19 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 20 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 21 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 22 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 23 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 24 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 25 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 26 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 27 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 28 | ·······································[daemon] | ||
| 29 | ·······································TimedLoginEnable=false | ||
| 30 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 31 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 32 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 33 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 34 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 35 | ·······································vc/3···················································actions·taken·on·the | ||
| 36 | ·······································vc/4···················································system·using·the | ||
| 37 | ······························································································ | 3 | ······························································································An·account·has·root |
| 4 | ······························································································authority·if·it·has | ||
| 5 | ······························································································a·UID·of·0.·Multiple | ||
| 6 | ······························································································accounts·with·a·UID | ||
| 7 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | ||
| 8 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | ||
| 9 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | ||
| 10 | ·······································their·UID·changed.·····································to·guess·a·password | ||
| 11 | 3.1.1···Verify·Only·Root·Has·UID·0·····If·the·account·is·associated·with·system·commands·or···for·a·privileged | ||
| 12 | 3.1.5··································applications·the·UID·should·be·changed·to·one·greater··account.·Proper | ||
| 13 | ·······································than·"0"·but·less·than·"1000."·Otherwise·assign·a·UID··configuration·of | ||
| 14 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | ||
| 15 | ·······································assigned.··············································to·afford·multiple | ||
| 16 | ······························································································system | ||
| 17 | ······························································································administrators | ||
| 18 | ······························································································access·to·root | ||
| 19 | ······························································································privileges·in·an | ||
| 20 | ······························································································accountable·manner. | ||
| 38 | ······························································································Even·though·the | 21 | ······························································································Even·though·the |
| 39 | ······························································································communications | 22 | ······························································································communications |
| 40 | ······························································································channel·may·be | 23 | ······························································································channel·may·be |
| 41 | ······························································································encrypted,·an | 24 | ······························································································encrypted,·an |
| 42 | ······························································································additional·layer·of | 25 | ······························································································additional·layer·of |
| 43 | ······························································································security·is·gained | 26 | ······························································································security·is·gained |
| 44 | ······························································································by·extending·the | 27 | ······························································································by·extending·the |
| Offset 56, 61 lines modified | Offset 39, 45 lines modified | ||
| 56 | ······························································································accountability·of | 39 | ······························································································accountability·of |
| 57 | ······························································································actions·performed·on | 40 | ······························································································actions·performed·on |
| 58 | ······························································································the·system·and·also | 41 | ······························································································the·system·and·also |
| 59 | ······························································································helps·to·minimize | 42 | ······························································································helps·to·minimize |
| 60 | ······························································································direct·attack | 43 | ······························································································direct·attack |
| 61 | ······························································································attempts·on·root's | 44 | ······························································································attempts·on·root's |
| 62 | ······························································································password. | 45 | ······························································································password. |
| 63 | ······························································································An·account·has·root | ||
| 64 | ······························································································authority·if·it·has | ||
| 65 | ······························································································a·UID·of·0.·Multiple | ||
| 66 | ······························································································accounts·with·a·UID | ||
| 67 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | ||
| 68 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | ||
| 69 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | ||
| 70 | ·······································their·UID·changed.·····································to·guess·a·password | ||
| 71 | 3.1.1···Verify·Only·Root·Has·UID·0·····If·the·account·is·associated·with·system·commands·or···for·a·privileged | ||
| 72 | 3.1.5··································applications·the·UID·should·be·changed·to·one·greater··account.·Proper | ||
| 73 | ·······································than·"0"·but·less·than·"1000."·Otherwise·assign·a·UID··configuration·of | ||
| 74 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | ||
| 75 | ·······································assigned.··············································to·afford·multiple | ||
| 76 | ······························································································s | 46 | ······························································································This·prevents |
| 77 | ······························································································administrators | ||
| 78 | ······························································································a | 47 | ······························································································attackers·with |
| 48 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | ||
| 49 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 50 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | ||
| 51 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | ||
| 52 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | ||
| 53 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | ||
| 79 | ······································· | 54 | ·······································emergency.service.·····································prevented·by |
| 80 | ······························································································ | 55 | ······························································································configuring·the |
| 56 | ······························································································bootloader·password. | ||
| 81 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 57 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 82 | ·······································automatically·login·without·user·interaction·or | 58 | ·······································automatically·login·without·user·interaction·or |
| 83 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | 59 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict |
| 84 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | 60 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to |
| 85 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | 61 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users |
| 86 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | 62 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts |
| 87 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system | 63 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system |
| 88 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. | 64 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. |
| 89 | ·······································[daemon] | 65 | ·······································[daemon] |
| 90 | ·······································AutomaticLoginEnable=false | 66 | ·······································AutomaticLoginEnable=false |
| 67 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 68 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 69 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 70 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 71 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 72 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 73 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 74 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 75 | ·······································[daemon] | ||
| 76 | ·······································TimedLoginEnable=false | ||
| 91 | ······························································································Preventing·direct | ||
| 92 | ······························································································root·login·to·serial | ||
| 93 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 94 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 95 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 96 | ·······································ttyS1··················································actions·taken·on·the | ||
| 97 | ······························································································systems·using·the | ||
| 98 | ······························································································root·account. | ||
| 99 | ······························································································This·prevents | ||
| Max diff block lines reached; 801675/816561 bytes (98.18%) of diff not shown. | |||
| Offset 8613, 18 lines modified | Offset 8613, 18 lines modified | ||
| 00021a40:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | 00021a40:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | ||
| 00021a50:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | 00021a50:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | ||
| 00021a60:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | 00021a60:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | ||
| 00021a70:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | 00021a70:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | ||
| 00021a80:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | 00021a80:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | ||
| 00021a90:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | 00021a90:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | ||
| 00021aa0:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | 00021aa0:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | ||
| 00021ab0:·725f·736e·6d70·645f·72 | 00021ab0:·725f·736e·6d70·645f·726f·5f73·7472·696e··r_snmpd_ro_strin | ||
| 00021ac0:·673d·6368·616e·6765·6d65·72 | 00021ac0:·673d·6368·616e·6765·6d65·726f·3c62·722f··g=changemero<br/ | ||
| 00021ad0:·3e76·6172·5f73·6e6d·7064·5f72· | 00021ad0:·3e76·6172·5f73·6e6d·7064·5f72·775f·7374··>var_snmpd_rw_st | ||
| 00021ae0:·7269·6e67·3d63·6861·6e67·656d·6572· | 00021ae0:·7269·6e67·3d63·6861·6e67·656d·6572·773c··ring=changemerw< | ||
| 00021af0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | 00021af0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | ||
| 00021b00:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | 00021b00:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | ||
| 00021b10:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | 00021b10:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | ||
| 00021b20:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | 00021b20:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | ||
| 00021b30:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | 00021b30:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | ||
| 00021b40:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | 00021b40:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | ||
| 00021b50:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack | 00021b50:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack |
| Offset 2913, 16 lines modified | Offset 2913, 16 lines modified | ||
| 2913 | ··············································································network·management | 2913 | ··············································································network·management |
| 2914 | ··············································································protocol·(SNMP) | 2914 | ··············································································protocol·(SNMP) |
| 2915 | ··············································································community·strings | 2915 | ··············································································community·strings |
| 2916 | ··············································································must·be·changed·to | 2916 | ··············································································must·be·changed·to |
| 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. | 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. |
| 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is | 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is |
| 2919 | ··································private.·This·profile·configures·new·read-··running·with·the | 2919 | ··································private.·This·profile·configures·new·read-··running·with·the |
| 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_r | 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_ro_string=changemero |
| 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_r | 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_rw_string=changemerw |
| 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can | 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can |
| 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about | 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about |
| 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the | 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the |
| 2925 | ··············································································network·and·use·the | 2925 | ··············································································network·and·use·the |
| 2926 | ··············································································information·to | 2926 | ··············································································information·to |
| 2927 | ··············································································potentially | 2927 | ··············································································potentially |
| 2928 | ··············································································compromise·the | 2928 | ··············································································compromise·the |
| Offset 7706, 18 lines modified | Offset 7706, 18 lines modified | ||
| 0001e190:·7373·776f·7264·7320·6865·6c70·7320·656e··sswords·helps·en | 0001e190:·7373·776f·7264·7320·6865·6c70·7320·656e··sswords·helps·en | ||
| 0001e1a0:·7375·7265·2074·6861·7420·6120·636f·6d70··sure·that·a·comp | 0001e1a0:·7375·7265·2074·6861·7420·6120·636f·6d70··sure·that·a·comp | ||
| 0001e1b0:·726f·6d69·7365·6420·7061·7373·776f·7264··romised·password | 0001e1b0:·726f·6d69·7365·6420·7061·7373·776f·7264··romised·password | ||
| 0001e1c0:·2069·7320·6e6f·740a·7265·2d75·7365·6420···is·not.re-used· | 0001e1c0:·2069·7320·6e6f·740a·7265·2d75·7365·6420···is·not.re-used· | ||
| 0001e1d0:·6279·2061·2075·7365·722e·0a20·203c·2f74··by·a·user..··</t | 0001e1d0:·6279·2061·2075·7365·722e·0a20·203c·2f74··by·a·user..··</t | ||
| 0001e1e0:·643e·0a20·203c·7464·3e76·6172·5f70·6173··d>.··<td>var_pas | 0001e1e0:·643e·0a20·203c·7464·3e76·6172·5f70·6173··d>.··<td>var_pas | ||
| 0001e1f0:·7377·6f72·645f·7061·6d5f·7265·6d65·6d62··sword_pam_rememb | 0001e1f0:·7377·6f72·645f·7061·6d5f·7265·6d65·6d62··sword_pam_rememb | ||
| 0001e200:·6572·3d35·3c62·722f·3e76·6172·5f70·6173··er=5<br/>var_pas | |||
| 0001e210:·7377·6f72·645f·7061·6d5f·7265·6d65·6d62··sword_pam_rememb | |||
| 0001e2 | 0001e200:·6572·5f63·6f6e·7472·6f6c·5f66·6c61·673d··er_control_flag= | ||
| 0001e2 | 0001e210:·7265·7175·6972·6564·3c62·722f·3e76·6172··required<br/>var | ||
| 0001e220:·5f70·6173·7377·6f72·645f·7061·6d5f·7265··_password_pam_re | |||
| 0001e230:·6d65·6d62·6572·3d35·3c2f·7464·3e0a·3c2f··member=5</td>.</ | |||
| 0001e240:·7472·3e0a·3c74·723e·0a20·203c·7464·3e49··tr>.<tr>.··<td>I | 0001e240:·7472·3e0a·3c74·723e·0a20·203c·7464·3e49··tr>.<tr>.··<td>I | ||
| 0001e250:·412d·3528·6629·3c62·722f·3e49·412d·3528··A-5(f)<br/>IA-5( | 0001e250:·412d·3528·6629·3c62·722f·3e49·412d·3528··A-5(f)<br/>IA-5( | ||
| 0001e260:·3129·2865·293c·2f74·643e·0a20·203c·7464··1)(e)</td>.··<td | 0001e260:·3129·2865·293c·2f74·643e·0a20·203c·7464··1)(e)</td>.··<td | ||
| 0001e270:·3e4e·2f41·3c2f·7464·3e0a·2020·3c74·643e··>N/A</td>.··<td> | 0001e270:·3e4e·2f41·3c2f·7464·3e0a·2020·3c74·643e··>N/A</td>.··<td> | ||
| 0001e280:·4c69·6d69·7420·5061·7373·776f·7264·2052··Limit·Password·R | 0001e280:·4c69·6d69·7420·5061·7373·776f·7264·2052··Limit·Password·R | ||
| 0001e290:·6575·7365·3a20·7379·7374·656d·2d61·7574··euse:·system-aut | 0001e290:·6575·7365·3a20·7379·7374·656d·2d61·7574··euse:·system-aut | ||
| 0001e2a0:·683c·2f74·643e·0a20·203c·7464·2078·6d6c··h</td>.··<td·xml | 0001e2a0:·683c·2f74·643e·0a20·203c·7464·2078·6d6c··h</td>.··<td·xml | ||
| Offset 7755, 19 lines modified | Offset 7755, 19 lines modified | ||
| 0001e4a0:·7072·6576·696f·7573·2070·6173·7377·6f72··previous·passwor | 0001e4a0:·7072·6576·696f·7573·2070·6173·7377·6f72··previous·passwor | ||
| 0001e4b0:·6473·2068·656c·7073·2065·6e73·7572·6520··ds·helps·ensure· | 0001e4b0:·6473·2068·656c·7073·2065·6e73·7572·6520··ds·helps·ensure· | ||
| 0001e4c0:·7468·6174·2061·2063·6f6d·7072·6f6d·6973··that·a·compromis | 0001e4c0:·7468·6174·2061·2063·6f6d·7072·6f6d·6973··that·a·compromis | ||
| 0001e4d0:·6564·2070·6173·7377·6f72·6420·6973·206e··ed·password·is·n | 0001e4d0:·6564·2070·6173·7377·6f72·6420·6973·206e··ed·password·is·n | ||
| 0001e4e0:·6f74·0a72·652d·7573·6564·2062·7920·6120··ot.re-used·by·a· | 0001e4e0:·6f74·0a72·652d·7573·6564·2062·7920·6120··ot.re-used·by·a· | ||
| 0001e4f0:·7573·6572·2e0a·2020·3c2f·7464·3e0a·2020··user..··</td>.·· | 0001e4f0:·7573·6572·2e0a·2020·3c2f·7464·3e0a·2020··user..··</td>.·· | ||
| 0001e500:·3c74·643e·7661·725f·7061·7373·776f·7264··<td>var_password | 0001e500:·3c74·643e·7661·725f·7061·7373·776f·7264··<td>var_password | ||
| 0001e510:·5f70·616d·5f72·656d·656d·6265·723d·353c··_pam_remember=5< | |||
| 0001e520:·6272·2f3e·7661·725f·7061·7373·776f·7264··br/>var_password | |||
| 0001e5 | 0001e510:·5f70·616d·5f72·656d·656d·6265·725f·636f··_pam_remember_co | ||
| 0001e5 | 0001e520:·6e74·726f·6c5f·666c·6167·3d72·6571·7569··ntrol_flag=requi | ||
| 0001e530:·7265·643c·6272·2f3e·7661·725f·7061·7373··red<br/>var_pass | |||
| 0001e540:·776f·7264·5f70·616d·5f72·656d·656d·6265··word_pam_remembe | |||
| 0001e550:·72 | 0001e550:·723d·353c·2f74·643e·0a3c·2f74·723e·0a3c··r=5</td>.</tr>.< | ||
| 0001e560:·7472·3e0a·2020·3c74·643e·4941·2d35·2863··tr>.··<td>IA-5(c | 0001e560:·7472·3e0a·2020·3c74·643e·4941·2d35·2863··tr>.··<td>IA-5(c | ||
| 0001e570:·293c·6272·2f3e·4941·2d35·2831·2928·6129··)<br/>IA-5(1)(a) | 0001e570:·293c·6272·2f3e·4941·2d35·2831·2928·6129··)<br/>IA-5(1)(a) | ||
| 0001e580:·3c62·722f·3e43·4d2d·3628·6129·3c62·722f··<br/>CM-6(a)<br/ | 0001e580:·3c62·722f·3e43·4d2d·3628·6129·3c62·722f··<br/>CM-6(a)<br/ | ||
| 0001e590:·3e49·412d·3528·3429·3c2f·7464·3e0a·2020··>IA-5(4)</td>.·· | 0001e590:·3e49·412d·3528·3429·3c2f·7464·3e0a·2020··>IA-5(4)</td>.·· | ||
| 0001e5a0:·3c74·643e·4e2f·413c·2f74·643e·0a20·203c··<td>N/A</td>.··< | 0001e5a0:·3c74·643e·4e2f·413c·2f74·643e·0a20·203c··<td>N/A</td>.··< | ||
| 0001e5b0:·7464·3e45·6e73·7572·6520·5041·4d20·456e··td>Ensure·PAM·En | 0001e5b0:·7464·3e45·6e73·7572·6520·5041·4d20·456e··td>Ensure·PAM·En | ||
| 0001e5c0:·666f·7263·6573·2050·6173·7377·6f72·6420··forces·Password· | 0001e5c0:·666f·7263·6573·2050·6173·7377·6f72·6420··forces·Password· | ||
| Offset 8614, 19 lines modified | Offset 8614, 19 lines modified | ||
| 00021a50:·6f72·6b0a·616e·6420·7573·6520·7468·6520··ork.and·use·the· | 00021a50:·6f72·6b0a·616e·6420·7573·6520·7468·6520··ork.and·use·the· | ||
| 00021a60:·696e·666f·726d·6174·696f·6e20·746f·2070··information·to·p | 00021a60:·696e·666f·726d·6174·696f·6e20·746f·2070··information·to·p | ||
| 00021a70:·6f74·656e·7469·616c·6c79·2063·6f6d·7072··otentially·compr | 00021a70:·6f74·656e·7469·616c·6c79·2063·6f6d·7072··otentially·compr | ||
| 00021a80:·6f6d·6973·6520·7468·6520·696e·7465·6772··omise·the·integr | 00021a80:·6f6d·6973·6520·7468·6520·696e·7465·6772··omise·the·integr | ||
| 00021a90:·6974·7920·6f66·2074·6865·2073·7973·7465··ity·of·the·syste | 00021a90:·6974·7920·6f66·2074·6865·2073·7973·7465··ity·of·the·syste | ||
| 00021aa0:·6d20·616e·640a·6e65·7477·6f72·6b28·7329··m·and.network(s) | 00021aa0:·6d20·616e·640a·6e65·7477·6f72·6b28·7329··m·and.network(s) | ||
| 00021ab0:·2e0a·2020·3c2f·7464·3e0a·2020·3c74·643e··..··</td>.··<td> | 00021ab0:·2e0a·2020·3c2f·7464·3e0a·2020·3c74·643e··..··</td>.··<td> | ||
| 00021ac0:·7661·725f·736e·6d70·645f·72 | 00021ac0:·7661·725f·736e·6d70·645f·726f·5f73·7472··var_snmpd_ro_str | ||
| 00021ad0:·696e·673d·6368·616e·6765·6d65·72 | 00021ad0:·696e·673d·6368·616e·6765·6d65·726f·3c62··ing=changemero<b | ||
| 00021ae0:·722f·3e76·6172·5f73·6e6d·7064·5f72· | 00021ae0:·722f·3e76·6172·5f73·6e6d·7064·5f72·775f··r/>var_snmpd_rw_ | ||
| 00021af0:·7374·7269·6e67·3d63·6861·6e67·656d·6572··string=changemer | 00021af0:·7374·7269·6e67·3d63·6861·6e67·656d·6572··string=changemer | ||
| 00021b00:· | 00021b00:·773c·2f74·643e·0a3c·2f74·723e·0a3c·7472··w</td>.</tr>.<tr | ||
| 00021b10:·3e0a·2020·3c74·643e·5343·2d35·3c2f·7464··>.··<td>SC-5</td | 00021b10:·3e0a·2020·3c74·643e·5343·2d35·3c2f·7464··>.··<td>SC-5</td | ||
| 00021b20:·3e0a·2020·3c74·643e·4e2f·413c·2f74·643e··>.··<td>N/A</td> | 00021b20:·3e0a·2020·3c74·643e·4e2f·413c·2f74·643e··>.··<td>N/A</td> | ||
| 00021b30:·0a20·203c·7464·3e43·6f6e·6669·6775·7265··.··<td>Configure | 00021b30:·0a20·203c·7464·3e43·6f6e·6669·6775·7265··.··<td>Configure | ||
| 00021b40:·204b·6572·6e65·6c20·746f·2052·6174·6520···Kernel·to·Rate· | 00021b40:·204b·6572·6e65·6c20·746f·2052·6174·6520···Kernel·to·Rate· | ||
| 00021b50:·4c69·6d69·7420·5365·6e64·696e·6720·6f66··Limit·Sending·of | 00021b50:·4c69·6d69·7420·5365·6e64·696e·6720·6f66··Limit·Sending·of | ||
| 00021b60:·2044·7570·6c69·6361·7465·2054·4350·2041···Duplicate·TCP·A | 00021b60:·2044·7570·6c69·6361·7465·2054·4350·2041···Duplicate·TCP·A | ||
| 00021b70:·636b·6e6f·776c·6564·676d·656e·7473·3c2f··cknowledgments</ | 00021b70:·636b·6e6f·776c·6564·676d·656e·7473·3c2f··cknowledgments</ |
| Offset 2580, 28 lines modified | Offset 2580, 28 lines modified | ||
| 2580 | ··············································································ensuring·a·larger | 2580 | ··············································································ensuring·a·larger |
| 2581 | ··············································································search·space. | 2581 | ··············································································search·space. |
| 2582 | ··································Do·not·allow·users·to·reuse·recent | 2582 | ··································Do·not·allow·users·to·reuse·recent |
| 2583 | ··································passwords.·This·can·be·accomplished·by | 2583 | ··································passwords.·This·can·be·accomplished·by |
| 2584 | ··································using·the·remember·option·for·the···········Preventing·re-use | 2584 | ··································using·the·remember·option·for·the···········Preventing·re-use |
| 2585 | ··································pam_pwhistory·PAM·module.···················of·previous | 2585 | ··································pam_pwhistory·PAM·module.···················of·previous |
| 2586 | IA-5(f)·······································································passwords·helps | 2586 | IA-5(f)·······································································passwords·helps |
| 2587 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/password-auth,·make··ensure·that·a·······var_password_pam_remember= | 2587 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/password-auth,·make··ensure·that·a·······var_password_pam_remember_control_flag=required |
| 2588 | (e)·····A··password-auth··········sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember | 2588 | (e)·····A··password-auth··········sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember=5 |
| 2589 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- | 2589 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- |
| 2590 | ··············································································used·by·a·user. | 2590 | ··············································································used·by·a·user. |
| 2591 | ··································For·example: | 2591 | ··································For·example: |
| 2592 | ··································password·required·pam_pwhistory.so | 2592 | ··································password·required·pam_pwhistory.so |
| 2593 | ··································use_authtok·remember=5 | 2593 | ··································use_authtok·remember=5 |
| 2594 | ··································Do·not·allow·users·to·reuse·recent | 2594 | ··································Do·not·allow·users·to·reuse·recent |
| 2595 | ··································passwords.·This·can·be·accomplished·by | 2595 | ··································passwords.·This·can·be·accomplished·by |
| 2596 | ··································using·the·remember·option·for·the···········Preventing·re-use | 2596 | ··································using·the·remember·option·for·the···········Preventing·re-use |
| 2597 | ··································pam_pwhistory·PAM·module.···················of·previous | 2597 | ··································pam_pwhistory·PAM·module.···················of·previous |
| 2598 | IA-5(f)·······································································passwords·helps | 2598 | IA-5(f)·······································································passwords·helps |
| 2599 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/system-auth,·make····ensure·that·a·······var_password_pam_remember= | 2599 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/system-auth,·make····ensure·that·a·······var_password_pam_remember_control_flag=required |
| 2600 | (e)·····A··system-auth············sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember | 2600 | (e)·····A··system-auth············sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember=5 |
| 2601 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- | 2601 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- |
| 2602 | ··············································································used·by·a·user. | 2602 | ··············································································used·by·a·user. |
| 2603 | ··································For·example: | 2603 | ··································For·example: |
| 2604 | ··································password·required·pam_pwhistory.so | 2604 | ··································password·required·pam_pwhistory.so |
| 2605 | ··································use_authtok·remember=5 | 2605 | ··································use_authtok·remember=5 |
| 2606 | ··············································································Use·of·a·complex | 2606 | ··············································································Use·of·a·complex |
| 2607 | ··············································································password·helps·to | 2607 | ··············································································password·helps·to |
| Offset 2913, 16 lines modified | Offset 2913, 16 lines modified | ||
| 2913 | ··············································································network·management | 2913 | ··············································································network·management |
| 2914 | ··············································································protocol·(SNMP) | 2914 | ··············································································protocol·(SNMP) |
| 2915 | ··············································································community·strings | 2915 | ··············································································community·strings |
| 2916 | ··············································································must·be·changed·to | 2916 | ··············································································must·be·changed·to |
| 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. | 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. |
| 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is | 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is |
| 2919 | ··································private.·This·profile·configures·new·read-··running·with·the | 2919 | ··································private.·This·profile·configures·new·read-··running·with·the |
| 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_r | 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_ro_string=changemero |
| 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_r | 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_rw_string=changemerw |
| 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can | 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can |
| 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about | 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about |
| 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the | 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the |
| 2925 | ··············································································network·and·use·the | 2925 | ··············································································network·and·use·the |
| 2926 | ··············································································information·to | 2926 | ··············································································information·to |
| 2927 | ··············································································potentially | 2927 | ··············································································potentially |
| 2928 | ··············································································compromise·the | 2928 | ··············································································compromise·the |
| Offset 63, 14787 lines modified | Offset 63, 14787 lines modified | ||
| 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | ||
| 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | ||
| 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | Diff chunk too large, falling back to line-by-line diff (5053 lines added, 5053 lines removed) | |
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·286 | 00000450:·2d32·2861·293c·2f74·643e·0a20·2020·2020··-2(a)</td>.····· | ||
| 00000460:· | 00000460:·203c·7464·3e43·6f6e·6669·6775·7265·2061···<td>Configure·a | ||
| 00000470:·7 | 00000470:·7564·6974·696e·6720·6f66·2075·6e73·7563··uditing·of·unsuc | ||
| 00000480:·636 | 00000480:·6365·7373·6675·6c20·6669·6c65·2061·6363··cessful·file·acc | ||
| 00000490:·6 | 00000490:·6573·7365·733c·2f74·643e·0a20·2020·2020··esses</td>.····· | ||
| 000004a0:· | 000004a0:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | ||
| 000004b0:·6 | 000004b0:·6e2d·5553·223e·0a20·2020·2020·2020·2045··n-US">.········E | ||
| 000004c0:· | 000004c0:·6e73·7572·6520·7468·6174·2075·6e73·7563··nsure·that·unsuc | ||
| 000004d0:·6 | 000004d0:·6365·7373·6675·6c20·6174·7465·6d70·7473··cessful·attempts | ||
| 000004e0:·20 | 000004e0:·2074·6f20·6163·6365·7373·2061·2066·696c···to·access·a·fil | ||
| 000004f0:· | 000004f0:·6520·6172·6520·6175·6469·7465·642e·0a0a··e·are·audited... | ||
| 00000500:· | 00000500:·5468·6520·666f·6c6c·6f77·696e·6720·7275··The·following·ru | ||
| 00000510:·6 | 00000510:·6c65·7320·636f·6e66·6967·7572·6520·6175··les·configure·au | ||
| 00000520:·6 | 00000520:·6469·7420·6173·2064·6573·6372·6962·6564··dit·as·described | ||
| 00000530:·666f·7 | 00000530:·2061·626f·7665·3a0a·3c70·7265·3e23·2320···above:.<pre>##· | ||
| 00000540:· | 00000540:·556e·7375·6363·6573·7366·756c·2066·696c··Unsuccessful·fil | ||
| 00000550:· | 00000550:·6520·6163·6365·7373·2028·616e·7920·6f74··e·access·(any·ot | ||
| 00000560:·6 | 00000560:·6865·7220·6f70·656e·7329·2054·6869·7320··her·opens)·This· | ||
| 00000570:· | 00000570:·6861·7320·746f·2067·6f20·6c61·7374·2e0a··has·to·go·last.. | ||
| 00000580:· | 00000580:·2d61·2061·6c77·6179·732c·6578·6974·202d··-a·always,exit·- | ||
| 00000590:· | 00000590:·4620·6172·6368·3d62·3332·202d·5320·6f70··F·arch=b32·-S·op | ||
| 000005a0:·6 | 000005a0:·656e·2c6f·7065·6e61·742c·6f70·656e·6174··en,openat,openat | ||
| 000005b0:· | 000005b0:·322c·6f70·656e·5f62·795f·6861·6e64·6c65··2,open_by_handle | ||
| 000005c0:· | 000005c0:·5f61·7420·2d46·2065·7869·743d·2d45·4143··_at·-F·exit=-EAC | ||
| 000005d0:· | 000005d0:·4345·5320·2d46·2061·7569·643e·3d31·3030··CES·-F·auid>=100 | ||
| 000005e0:· | 000005e0:·3020·2d46·2061·7569·6421·3d75·6e73·6574··0·-F·auid!=unset | ||
| 000005f0:·20 | 000005f0:·202d·4620·6b65·793d·756e·7375·6363·6573···-F·key=unsucces | ||
| 00000600:·7 | 00000600:·7366·756c·2d61·6363·6573·730a·2d61·2061··sful-access.-a·a | ||
| 00000610:· | 00000610:·6c77·6179·732c·6578·6974·202d·4620·6172··lways,exit·-F·ar | ||
| 00000620:· | 00000620:·6368·3d62·3634·202d·5320·6f70·656e·2c6f··ch=b64·-S·open,o | ||
| 00000630:·7 | 00000630:·7065·6e61·742c·6f70·656e·6174·322c·6f70··penat,openat2,op | ||
| 00000640:· | 00000640:·656e·5f62·795f·6861·6e64·6c65·5f61·7420··en_by_handle_at· | ||
| 00000650:· | 00000650:·2d46·2065·7869·743d·2d45·4143·4345·5320··-F·exit=-EACCES· | ||
| 00000660:·2 | 00000660:·2d46·2061·7569·643e·3d31·3030·3020·2d46··-F·auid>=1000·-F | ||
| 00000670:· | 00000670:·2061·7569·6421·3d75·6e73·6574·202d·4620···auid!=unset·-F· | ||
| 00000680:·6 | 00000680:·6b65·793d·756e·7375·6363·6573·7366·756c··key=unsuccessful | ||
| 00000690:·2 | 00000690:·2d61·6363·6573·730a·2d61·2061·6c77·6179··-access.-a·alway | ||
| 000006a0:·7 | 000006a0:·732c·6578·6974·202d·4620·6172·6368·3d62··s,exit·-F·arch=b | ||
| 000006b0:· | 000006b0:·3332·202d·5320·6f70·656e·2c6f·7065·6e61··32·-S·open,opena | ||
| 000006c0:·74 | 000006c0:·742c·6f70·656e·6174·322c·6f70·656e·5f62··t,openat2,open_b | ||
| 000006d0:· | 000006d0:·795f·6861·6e64·6c65·5f61·7420·2d46·2065··y_handle_at·-F·e | ||
| 000006e0:· | 000006e0:·7869·743d·2d45·5045·524d·202d·4620·6175··xit=-EPERM·-F·au | ||
| 000006f0:· | 000006f0:·6964·3e3d·3130·3030·202d·4620·6175·6964··id>=1000·-F·auid | ||
| 00000700:· | 00000700:·213d·756e·7365·7420·2d46·206b·6579·3d75··!=unset·-F·key=u | ||
| 00000710:· | 00000710:·6e73·7563·6365·7373·6675·6c2d·6163·6365··nsuccessful-acce | ||
| 00000720:· | 00000720:·7373·0a2d·6120·616c·7761·7973·2c65·7869··ss.-a·always,exi | ||
| 00000730:·74 | 00000730:·7420·2d46·2061·7263·683d·6236·3420·2d53··t·-F·arch=b64·-S | ||
| 00000740:· | 00000740:·206f·7065·6e2c·6f70·656e·6174·2c6f·7065···open,openat,ope | ||
| 00000750:· | 00000750:·6e61·7432·2c6f·7065·6e5f·6279·5f68·616e··nat2,open_by_han | ||
| 00000760:· | 00000760:·646c·655f·6174·202d·4620·6578·6974·3d2d··dle_at·-F·exit=- | ||
| 00000770:· | 00000770:·4550·4552·4d20·2d46·2061·7569·643e·3d31··EPERM·-F·auid>=1 | ||
| 00000780:· | 00000780:·3030·3020·2d46·2061·7569·6421·3d75·6e73··000·-F·auid!=uns | ||
| 00000790:·202d· | 00000790:·6574·202d·4620·6b65·793d·756e·7375·6363··et·-F·key=unsucc | ||
| 000007a0:· | 000007a0:·6573·7366·756c·2d61·6363·6573·7320·2020··essful-access··· | ||
| 000007b0:· | 000007b0:·203c·2f70·7265·3e0a·0a4c·6f61·6420·6e65···</pre>..Load·ne | ||
| 000007c0:· | 000007c0:·7720·4175·6469·7420·7275·6c65·7320·696e··w·Audit·rules·in | ||
| 000007d0:· | 000007d0:·746f·206b·6572·6e65·6c20·6279·2072·756e··to·kernel·by·run | ||
| 000007e0:·6 | 000007e0:·6e69·6e67·3a0a·3c70·7265·3e61·7567·656e··ning:.<pre>augen | ||
| 000007f0:· | 000007f0:·7275·6c65·7320·2d2d·6c6f·6164·3c2f·7072··rules·--load</pr | ||
| 00000800:· | 00000800:·653e·0a0a·4e6f·7465·3a20·5468·6973·2072··e>..Note:·This·r | ||
| 00000810:· | 00000810:·756c·6520·7573·6573·2061·2073·7065·6369··ule·uses·a·speci | ||
| 00000820:·6 | 00000820:·616c·2073·6574·206f·6620·4175·6469·7420··al·set·of·Audit· | ||
| 00000830:· | 00000830:·7275·6c65·7320·746f·2063·6f6d·706c·7920··rules·to·comply· | ||
| 00000840:· | 00000840:·7769·7468·204f·5350·5020·342e·322e·312e··with·OSPP·4.2.1. | ||
| 00000850:· | 00000850:·2059·6f75·206d·6179·2072·6575·7365·2074···You·may·reuse·t | ||
| 00000860:· | 00000860:·6869·7320·7275·6c65·2069·6e20·6469·6666··his·rule·in·diff | ||
| 00000870:· | 00000870:·6572·656e·7420·7072·6f66·696c·6573·2e20··erent·profiles.· | ||
| 00000880:· | 00000880:·4966·2079·6f75·2064·6563·6964·6520·746f··If·you·decide·to | ||
| 00000890:· | 00000890:·2064·6f20·736f·2c20·6974·2069·7320·7265···do·so,·it·is·re | ||
| 000008a0:·6 | 000008a0:·636f·6d6d·656e·6465·6420·7468·6174·2079··commended·that·y | ||
| 000008b0:· | 000008b0:·6f75·2069·6e73·7065·6374·2063·6f6e·7465··ou·inspect·conte | ||
| 000008c0:· | 000008c0:·6e74·7320·6f66·2074·6865·2066·696c·6520··nts·of·the·file· | ||
| 000008d0:·6 | 000008d0:·636c·6f73·656c·7920·616e·6420·6d61·6b65··closely·and·make | ||
| 000008e0:· | 000008e0:·2073·7572·6520·7468·6174·2074·6865·7920···sure·that·they· | ||
| 000008f0:· | 000008f0:·6172·6520·616c·6c69·676e·6564·2077·6974··are·alligned·wit | ||
| 00000900:· | 00000900:·6820·796f·7572·206e·6565·6473·2e0a·2020··h·your·needs..·· | ||
| 00000910:· | 00000910:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | ||
| 00000920:· | 00000920:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 00000930:· | 00000930:·2d55·5322·3e0a·2020·2020·2020·2020·556e··-US">.········Un | ||
| 00000940:· | 00000940:·7375·6363·6573·7366·756c·2061·7474·656d··successful·attem | ||
| 00000950:· | 00000950:·7074·7320·746f·2061·6363·6573·7320·6120··pts·to·access·a· | ||
| 00000960:· | 00000960:·6669·6c65·206d·6967·6874·2062·6520·7369··file·might·be·si | ||
| 00000970:·6 | 00000970:·676e·7320·6f66·206d·616c·6963·696f·7573··gns·of·malicious | ||
| 00000980:·206 | 00000980:·2061·6374·6976·6974·7920·6861·7070·656e···activity·happen | ||
| 00000990:·696 | 00000990:·696e·6720·7769·7468·696e·2074·6865·2073··ing·within·the·s | ||
| 000009a0:· | 000009a0:·7973·7465·6d2e·2041·7564·6974·696e·6720··ystem.·Auditing· | ||
| 000009b0:·6 | 000009b0:·6f66·2073·7563·6820·6163·7469·7669·7469··of·such·activiti | ||
| 000009c0:·6 | 000009c0:·6573·2068·656c·7073·2069·6e20·7468·6569··es·helps·in·thei | ||
| 000009d0:· | 000009d0:·7220·6d6f·6e69·746f·7269·6e67·2061·6e64··r·monitoring·and | ||
| 000009e0:· | 000009e0:·2069·6e76·6573·7469·6761·7469·6f6e·2e0a···investigation.. | ||
| 000009f0:· | 000009f0:·2020·2020·2020·3c2f·7464·3e0a·2020·2020········</td>.···· | ||
| 00000a00:· | 00000a00:·3c2f·7472·3e0a·2020·2020·3c74·723e·0a20··</tr>.····<tr>.· | ||
| 00000a10:· | 00000a10:·2020·2020·203c·7464·3e41·552d·3228·6429·······<td>AU-2(d) | ||
| 00000a20:· | 00000a20:·3c62·722f·3e41·552d·3132·2863·293c·6272··<br/>AU-12(c)<br | ||
| 00000a30:·3e4 | 00000a30:·2f3e·434d·2d36·2861·293c·2f74·643e·0a20··/>CM-6(a)</td>.· | ||
| 00000a40:· | 00000a40:·2020·2020·203c·7464·3e52·6563·6f72·6420·······<td>Record· | ||
| 00000a50:· | 00000a50:·556e·7375·6363·6573·7366·756c·2050·6572··Unsuccessful·Per | ||
| 00000a60:· | 00000a60:·6d69·7373·696f·6e20·4368·616e·6765·7320··mission·Changes· | ||
| 00000a70:·7 | 00000a70:·746f·2046·696c·6573·202d·2073·6574·7861··to·Files·-·setxa | ||
| 00000a80:· | 00000a80:·7474·723c·2f74·643e·0a20·2020·2020·203c··ttr</td>.······< | ||
| 00000a90:· | 00000a90:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000aa0:·2020·2020·20 | 00000aa0:·5553·223e·0a20·2020·2020·2020·2054·6865··US">.········The | ||
| 00000ab0:· | 00000ab0:·2061·7564·6974·2073·7973·7465·6d20·7368···audit·system·sh | ||
| 00000ac0:· | 00000ac0:·6f75·6c64·2063·6f6c·6c65·6374·2075·6e73··ould·collect·uns | ||
| 00000ad0:·7 | 00000ad0:·7563·6365·7373·6675·6c20·6669·6c65·2070··uccessful·file·p | ||
| 00000ae0:·6 | 00000ae0:·6572·6d69·7373·696f·6e20·6368·616e·6765··ermission·change | ||
| 00000af0:· | 00000af0:·0a61·7474·656d·7074·7320·666f·7220·616c··.attempts·for·al | ||
| 00000b00:·6 | 00000b00:·6c20·7573·6572·7320·616e·6420·726f·6f74··l·users·and·root | ||
| 00000b10:· | 00000b10:·2e0a·4966·2074·6865·203c·7474·3e61·7564··..If·the·<tt>aud | ||
| 00000b20:·6 | 00000b20:·6974·643c·2f74·743e·2064·6165·6d6f·6e20··itd</tt>·daemon· | ||
| 00000b30:· | 00000b30:·6973·2063·6f6e·6669·6775·7265·640a·746f··is·configured.to | ||
| 00000b40:· | 00000b40:·2075·7365·2074·6865·203c·7474·3e61·7567···use·the·<tt>aug | ||
| 00000b50:· | 00000b50:·656e·7275·6c65·733c·2f74·743e·2070·726f··enrules</tt>·pro | ||
| 00000b60:· | 00000b60:·6772·616d·2074·6f20·7265·6164·2061·7564··gram·to·read·aud | ||
| 00000b70:· | 00000b70:·6974·2072·756c·6573·2064·7572·696e·6720··it·rules·during· | ||
| 00000b80:·6 | 00000b80:·6461·656d·6f6e·0a73·7461·7274·7570·2028··daemon.startup·( | ||
| 00000b90:·7 | 00000b90:·7468·6520·6465·6661·756c·7429·2c20·6164··the·default),·ad | ||
| 00000ba0:· | 00000ba0:·6420·7468·6520·666f·6c6c·6f77·696e·6720··d·the·following· | ||
| 00000bb0:· | 00000bb0:·6c69·6e65·7320·746f·2061·2066·696c·6520··lines·to·a·file· | ||
| Max diff block lines reached; 6635769/7333661 bytes (90.48%) of diff not shown. | |||
| Offset 75, 33 lines modified | Offset 75, 31 lines modified | ||
| 75 | ········<tt>openscap-scanner</tt>·contains·the·<tt>oscap</tt>·command·line·tool.·This·tool·is·a | 75 | ········<tt>openscap-scanner</tt>·contains·the·<tt>oscap</tt>·command·line·tool.·This·tool·is·a |
| 76 | configuration·and·vulnerability·scanner,·capable·of·performing·compliance·checking·using | 76 | configuration·and·vulnerability·scanner,·capable·of·performing·compliance·checking·using |
| 77 | SCAP·content. | 77 | SCAP·content. |
| 78 | ······</td> | 78 | ······</td> |
| 79 | ····</tr> | 79 | ····</tr> |
| 80 | ····<tr> | 80 | ····<tr> |
| 81 | ······<td>FAU_GEN.1</td> | 81 | ······<td>FAU_GEN.1</td> |
| 82 | ······<td>Disable·SSH·Root·Login</td> | ||
| 82 | ······<td>Include·Local·Events·in·Audit·Logs</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set | ||
| 85 | <tt>local_events</tt>·to·<tt>yes</tt>·in·<tt>/etc/audit/auditd.conf</tt>. | ||
| 86 | This·is·the·default·setting. | ||
| 87 | ······</td> | ||
| 88 | ······<td·xml:lang="en-US"> | ||
| 89 | ········If·option·<tt>local_events</tt>·isn't·set·to·<tt>yes</tt>·only·events·from | ||
| 90 | network·will·be·aggregated. | ||
| 91 | ······</td> | ||
| 92 | ····</tr> | ||
| 93 | ····<tr> | ||
| 94 | ······<td>FAU_GEN.1</td> | ||
| 95 | ······<td>Ensure·the·audit·Subsystem·is·Installed</td> | ||
| 96 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 97 | ········The· | 84 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 85 | system·directly·over·a·network. | ||
| 86 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 87 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 88 | <pre>PermitRootLogin·no</pre> | ||
| 98 | ······</td> | 89 | ······</td> |
| 99 | ······<td·xml:lang="en-US"> | 90 | ······<td·xml:lang="en-US"> |
| 100 | ········ | 91 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of |
| 92 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 93 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 94 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 95 | direct·attack·attempts·on·root's·password. | ||
| 101 | ······</td> | 96 | ······</td> |
| 102 | ····</tr> | 97 | ····</tr> |
| 103 | ····<tr> | 98 | ····<tr> |
| 104 | ······<td>FAU_GEN.1</td> | 99 | ······<td>FAU_GEN.1</td> |
| 105 | ······<td>Enable·Auditing·for·Processes·Which·Start·Prior·to·the·Audit·Daemon</td> | 100 | ······<td>Enable·Auditing·for·Processes·Which·Start·Prior·to·the·Audit·Daemon</td> |
| 106 | ······<td·xml:lang="en-US"> | 101 | ······<td·xml:lang="en-US"> |
| 107 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start | 102 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start |
| Offset 119, 55 lines modified | Offset 117, 33 lines modified | ||
| 119 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling | 117 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling |
| 120 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument | 118 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument |
| 121 | ensures·it·is·set·for·every·process·during·boot. | 119 | ensures·it·is·set·for·every·process·during·boot. |
| 122 | ······</td> | 120 | ······</td> |
| 123 | ····</tr> | 121 | ····</tr> |
| 124 | ····<tr> | 122 | ····<tr> |
| 125 | ······<td>FAU_GEN.1</td> | 123 | ······<td>FAU_GEN.1</td> |
| 126 | ······<td>Set·number·of·records·to·cause·an·explicit·flush·to·audit·logs</td> | ||
| 127 | ······<td·xml:lang="en-US"> | ||
| 128 | ········To·configure·Audit·daemon·to·issue·an·explicit·flush·to·disk·command | ||
| 129 | after·writing·<abbr·title="$var_auditd_freq"><tt>50</tt></abbr>·records,·set·<tt>freq</tt>·to·<tt><abbr·title="$var_auditd_freq"><tt>50</tt></abbr></tt> | ||
| 130 | in·<tt>/etc/audit/auditd.conf</tt>. | ||
| 131 | ······</td> | ||
| 132 | ······<td·xml:lang="en-US"> | ||
| 133 | ········If·option·<tt>freq</tt>·isn't·set·to·<tt><sub·idref="var_auditd_freq"·/></tt>,·the·flush·to·disk | ||
| 134 | may·happen·after·higher·number·of·records,·increasing·the·danger | ||
| 135 | of·audit·loss. | ||
| 136 | ······</td> | ||
| 137 | ····</tr> | ||
| 138 | ····<tr> | ||
| 139 | ······<td>FAU_GEN.1</td> | ||
| 140 | ······<td>Ensure·the·audit | 124 | ······<td>Ensure·the·audit·Subsystem·is·Installed</td> |
| 141 | ······<td·xml:lang="en-US"> | 125 | ······<td·xml:lang="en-US"> |
| 142 | ········The·audit | 126 | ········The·audit·package·should·be·installed. |
| 143 | ······</td> | 127 | ······</td> |
| 144 | ······<td·xml:lang="en-US"> | 128 | ······<td·xml:lang="en-US"> |
| 145 | ········The·auditd·service·is·an·access·monitoring·and·accounting·daemon,·watching·system·calls·to·audit·any·access,·in·comparison·with·potential·local·access·control·policy·such·as·SELinux·policy. | 129 | ········The·auditd·service·is·an·access·monitoring·and·accounting·daemon,·watching·system·calls·to·audit·any·access,·in·comparison·with·potential·local·access·control·policy·such·as·SELinux·policy. |
| 146 | ······</td> | 130 | ······</td> |
| 147 | ····</tr> | 131 | ····</tr> |
| 148 | ····<tr> | 132 | ····<tr> |
| 149 | ······<td>FAU_GEN.1</td> | 133 | ······<td>FAU_GEN.1</td> |
| 150 | ······<td> | 134 | ······<td>Include·Local·Events·in·Audit·Logs</td> |
| 151 | ······<td·xml:lang="en-US"> | 135 | ······<td·xml:lang="en-US"> |
| 136 | ········To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set | ||
| 137 | <tt>local_events</tt>·to·<tt>yes</tt>·in·<tt>/etc/audit/auditd.conf</tt>. | ||
| 138 | This·is·the·default·setting. | ||
| 152 | ········The·root·user·should·never·be·allowed·to·login·to·a | ||
| 153 | system·directly·over·a·network. | ||
| 154 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 155 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 156 | <pre>PermitRootLogin·no</pre> | ||
| 157 | ······</td> | 139 | ······</td> |
| 158 | ······<td·xml:lang="en-US"> | 140 | ······<td·xml:lang="en-US"> |
| 141 | ········If·option·<tt>local_events</tt>·isn't·set·to·<tt>yes</tt>·only·events·from | ||
| 142 | network·will·be·aggregated. | ||
| 159 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of | ||
| 160 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 161 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 162 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 163 | direct·attack·attempts·on·root's·password. | ||
| 164 | ······</td> | 143 | ······</td> |
| 165 | ····</tr> | 144 | ····</tr> |
| 166 | ····<tr> | 145 | ····<tr> |
| 167 | ······<td>FAU_GEN.1</td> | 146 | ······<td>FAU_GEN.1</td> |
| 168 | ······<td>Configure·basic·parameters·of·Audit·system</td> | 147 | ······<td>Configure·basic·parameters·of·Audit·system</td> |
| 169 | ······<td·xml:lang="en-US"> | 148 | ······<td·xml:lang="en-US"> |
| 170 | ········Perform·basic·configuration·of·Audit·system. | 149 | ········Perform·basic·configuration·of·Audit·system. |
| Offset 231, 345 lines modified | Offset 207, 242 lines modified | ||
| 231 | ········Each·process·on·the·system·carries·an·"auditable"·flag·which·indicates·whether | 207 | ········Each·process·on·the·system·carries·an·"auditable"·flag·which·indicates·whether |
| 232 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling | 208 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling |
| 233 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument | 209 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument |
| 234 | ensures·it·is·set·for·every·process·during·boot. | 210 | ensures·it·is·set·for·every·process·during·boot. |
| 235 | ······</td> | 211 | ······</td> |
| 236 | ····</tr> | 212 | ····</tr> |
| 237 | ····<tr> | 213 | ····<tr> |
| 238 | ······<td>FAU_GEN.1 | 214 | ······<td>FAU_GEN.1</td> |
| 239 | ······<td>Ensure·audit | 215 | ······<td>Ensure·the·audit-libs·package·as·a·part·of·audit·Subsystem·is·Installed</td> |
| 240 | ······<td·xml:lang="en-US"> | 216 | ······<td·xml:lang="en-US"> |
| 217 | ········The·audit-libs·package·should·be·installed. | ||
| 241 | ········At·a·minimum,·the·audit·system·should·collect·the·execution·of | ||
| 242 | privileged·commands·for·all·users·and·root.·If·the·<tt>auditd</tt>·daemon·is | ||
| 243 | configured·to·use·the·<tt>augenrules</tt>·program·to·read·audit·rules·during | ||
| 244 | daemon·startup·(the·default),·add·a·line·of·the·following·form·to·a·file·with | ||
| 245 | suffix·<tt>.rules</tt>·in·the·directory·<tt>/etc/audit/rules.d</tt>: | ||
| 246 | <pre>-a·always,exit·-F·path=/usr/bin/newgidmap·-F·auid>=1000·-F·auid!=unset·-F·key=privileged</pre> | ||
| 247 | If·the·<tt>auditd</tt>·daemon·is·configured·to·use·the·<tt>auditctl</tt> | ||
| 248 | utility·to·read·audit·rules·during·daemon·startup,·add·a·line·of·the·following | ||
| 249 | form·to·<tt>/etc/audit/audit.rules</tt>: | ||
| Max diff block lines reached; 525925/532201 bytes (98.82%) of diff not shown. | |||
| Offset 43, 73 lines modified | Offset 43, 58 lines modified | ||
| 43 | ·····························································································································command·line·tool.·This | 43 | ·····························································································································command·line·tool.·This |
| 44 | AGD_PRE.1·········Install·openscap-·The·openscap-scanner·package·can·be·installed·with·the·following·command:················tool·is·a·configuration | 44 | AGD_PRE.1·········Install·openscap-·The·openscap-scanner·package·can·be·installed·with·the·following·command:················tool·is·a·configuration |
| 45 | AGD_OPE.1·········scanner·Package···$·sudo·yum·install·openscap-scanner······················································and·vulnerability | 45 | AGD_OPE.1·········scanner·Package···$·sudo·yum·install·openscap-scanner······················································and·vulnerability |
| 46 | ·····························································································································scanner,·capable·of | 46 | ·····························································································································scanner,·capable·of |
| 47 | ·····························································································································performing·compliance | 47 | ·····························································································································performing·compliance |
| 48 | ·····························································································································checking·using·SCAP | 48 | ·····························································································································checking·using·SCAP |
| 49 | ·····························································································································content. | 49 | ·····························································································································content. |
| 50 | ·····························································································································Even·though·the | ||
| 51 | ·····························································································································communications·channel | ||
| 50 | ··················Include·Local······························································································If·option·local_events | ||
| 51 | FAU_GEN.1·········Events·in·Audit···To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set·local_events·to·yes·isn't·set·to·yes·only | ||
| 52 | ··················Logs··············in·/etc/audit/auditd.conf.·This·is·the·default·setting.··································events·from·network | ||
| 53 | ····························································································································· | 52 | ·····························································································································may·be·encrypted,·an |
| 54 | ····························································································································· | 53 | ·····························································································································additional·layer·of |
| 54 | ·····························································································································security·is·gained·by | ||
| 55 | ·····························································································································extending·the·policy·of | ||
| 56 | ·····························································································································not·logging·directly·on | ||
| 57 | ··················Disable·SSH·Root··The·root·user·should·never·be·allowed·to·login·to·a·system·directly·over·a·network.·To···as·root.·In·addition, | ||
| 58 | FAU_GEN.1·········Login·············disable·root·login·via·SSH,·add·or·correct·the·following·line·in·/etc/ssh/sshd_config:···logging·in·with·a·user- | ||
| 59 | ····································PermitRootLogin·no·······································································specific·account | ||
| 55 | ····························································································································· | 60 | ·····························································································································provides·individual |
| 56 | ·····························································································································a | 61 | ·····························································································································accountability·of |
| 57 | ··················Ensure·the·audit···························································································watching·system·calls | ||
| 58 | FAU_GEN.1·········Subsystem·is······The·audit·package·should·be·installed.···················································to·audit·any·access,·in | ||
| 59 | ··················Installed··································································································comparison·with | ||
| 60 | ·····························································································································potential·local·access | ||
| 61 | ····························································································································· | 62 | ·····························································································································actions·performed·on |
| 63 | ·····························································································································the·system·and·also | ||
| 64 | ·····························································································································helps·to·minimize | ||
| 65 | ·····························································································································direct·attack·attempts | ||
| 62 | ····························································································································· | 66 | ·····························································································································on·root's·password. |
| 63 | ·····························································································································Each·process·on·the | 67 | ·····························································································································Each·process·on·the |
| 64 | ·····························································································································system·carries·an | 68 | ·····························································································································system·carries·an |
| 65 | ·····························································································································"auditable"·flag·which | 69 | ·····························································································································"auditable"·flag·which |
| 66 | ····································To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit········indicates·whether·its | 70 | ····································To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit········indicates·whether·its |
| 67 | ··················Enable·Auditing···daemon,·add·the·argument·audit=1·to·the·default·GRUB·2·command·line·for·the·Linux········activities·can·be | 71 | ··················Enable·Auditing···daemon,·add·the·argument·audit=1·to·the·default·GRUB·2·command·line·for·the·Linux········activities·can·be |
| 68 | ··················for·Processes·····operating·system.·To·ensure·that·audit=1·is·added·as·a·kernel·command·line·argument·to···audited.·Although | 72 | ··················for·Processes·····operating·system.·To·ensure·that·audit=1·is·added·as·a·kernel·command·line·argument·to···audited.·Although |
| 69 | FAU_GEN.1·········Which·Start·Prior·newly·installed·kernels,·add·audit=1·to·the·default·Grub2·command·line·for·Linux·········auditd·takes·care·of | 73 | FAU_GEN.1·········Which·Start·Prior·newly·installed·kernels,·add·audit=1·to·the·default·Grub2·command·line·for·Linux·········auditd·takes·care·of |
| 70 | ··················to·the·Audit······operating·systems.·Modify·the·line·within·/etc/default/grub·as·shown·below:··············enabling·this·for·all | 74 | ··················to·the·Audit······operating·systems.·Modify·the·line·within·/etc/default/grub·as·shown·below:··············enabling·this·for·all |
| 71 | ··················Daemon············GRUB_CMDLINE_LINUX="...·audit=1·..."·····················································processes·which·launch | 75 | ··················Daemon············GRUB_CMDLINE_LINUX="...·audit=1·..."·····················································processes·which·launch |
| 72 | ····································Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········after·it·does,·adding | 76 | ····································Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········after·it·does,·adding |
| 73 | ····································#·grubby·--update-kernel=ALL·--args="audit=1"············································the·kernel·argument | 77 | ····································#·grubby·--update-kernel=ALL·--args="audit=1"············································the·kernel·argument |
| 74 | ·····························································································································ensures·it·is·set·for | 78 | ·····························································································································ensures·it·is·set·for |
| 75 | ·····························································································································every·process·during | 79 | ·····························································································································every·process·during |
| 76 | ·····························································································································boot. | 80 | ·····························································································································boot. |
| 77 | ·····························································································································If·option·freq·isn't | ||
| 78 | ··················Set·number·of······························································································set·to·,·the·flush·to | ||
| 79 | FAU_GEN.1·········records·to·cause··To·configure·Audit·daemon·to·issue·an·explicit·flush·to·disk·command·after·writing·50····disk·may·happen·after | ||
| 80 | ··················an·explicit·flush·records,·set·freq·to·50·in·/etc/audit/auditd.conf.·······································higher·number·of | ||
| 81 | ··················to·audit·logs······························································································records,·increasing·the | ||
| 82 | ·····························································································································danger·of·audit·loss. | ||
| 83 | ·····························································································································The·auditd·service·is | 81 | ·····························································································································The·auditd·service·is |
| 84 | ·····························································································································an·access·monitoring | 82 | ·····························································································································an·access·monitoring |
| 85 | ·················· | 83 | ·····························································································································and·accounting·daemon, |
| 86 | ·················· | 84 | ··················Ensure·the·audit···························································································watching·system·calls |
| 87 | FAU_GEN.1········· | 85 | FAU_GEN.1·········Subsystem·is······The·audit·package·should·be·installed.···················································to·audit·any·access,·in |
| 88 | ·················· | 86 | ··················Installed··································································································comparison·with |
| 89 | ·················· | 87 | ·····························································································································potential·local·access |
| 90 | ·····························································································································control·policy·such·as | 88 | ·····························································································································control·policy·such·as |
| 91 | ·····························································································································SELinux·policy. | 89 | ·····························································································································SELinux·policy. |
| 92 | ·····························································································································Even·though·the | ||
| 93 | ·················· | 90 | ··················Include·Local······························································································If·option·local_events |
| 91 | FAU_GEN.1·········Events·in·Audit···To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set·local_events·to·yes·isn't·set·to·yes·only | ||
| 92 | ··················Logs··············in·/etc/audit/auditd.conf.·This·is·the·default·setting.··································events·from·network | ||
| 94 | ····························································································································· | 93 | ·····························································································································will·be·aggregated. |
| 95 | ·····························································································································additional·layer·of | ||
| 96 | ·····························································································································security·is·gained·by | ||
| 97 | ·····························································································································extending·the·policy·of | ||
| 98 | ·····························································································································not·logging·directly·on | ||
| 99 | ··················Disable·SSH·Root··The·root·user·should·never·be·allowed·to·login·to·a·system·directly·over·a·network.·To···as·root.·In·addition, | ||
| 100 | FAU_GEN.1·········Login·············disable·root·login·via·SSH,·add·or·correct·the·following·line·in·/etc/ssh/sshd_config:···logging·in·with·a·user- | ||
| 101 | ····································PermitRootLogin·no·······································································specific·account | ||
| 102 | ·····························································································································provides·individual | ||
| 103 | ·····························································································································accountability·of | ||
| 104 | ·····························································································································actions·performed·on | ||
| 105 | ·····························································································································the·system·and·also | ||
| 106 | ·····························································································································helps·to·minimize | ||
| 107 | ·····························································································································direct·attack·attempts | ||
| 108 | ·····························································································································on·root's·password. | ||
| 109 | ····································Perform·basic·configuration·of·Audit·system.·Make·sure·that·any·previously·defined·rules | 94 | ····································Perform·basic·configuration·of·Audit·system.·Make·sure·that·any·previously·defined·rules |
| 110 | ····································are·cleared,·the·auditing·system·is·configured·to·handle·sudden·bursts·of·events,·and·in | 95 | ····································are·cleared,·the·auditing·system·is·configured·to·handle·sudden·bursts·of·events,·and·in |
| 111 | ····································cases·of·failure,·messages·are·configured·to·be·directed·to·system·log.·The·following | 96 | ····································cases·of·failure,·messages·are·configured·to·be·directed·to·system·log.·The·following |
| 112 | ····································rules·configure·audit·as·described·above: | 97 | ····································rules·configure·audit·as·described·above: |
| 113 | ····································##·First·rule·-·delete·all·······························································Without·basic | 98 | ····································##·First·rule·-·delete·all·······························································Without·basic |
| 114 | ····································-D·······················································································configurations,·audit | 99 | ····································-D·······················································································configurations,·audit |
| 115 | ·····························································································································may·not·perform·as | 100 | ·····························································································································may·not·perform·as |
| Offset 158, 258 lines modified | Offset 143, 205 lines modified | ||
| 158 | ··················the·Audit·Daemon··To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit,·add·audit=1·to·/···enabling·this·for·all | 143 | ··················the·Audit·Daemon··To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit,·add·audit=1·to·/···enabling·this·for·all |
| 159 | ··················in·zIPL···········etc/kernel/cmdline.······································································processes·which·launch | 144 | ··················in·zIPL···········etc/kernel/cmdline.······································································processes·which·launch |
| 160 | ·····························································································································after·it·does,·adding | 145 | ·····························································································································after·it·does,·adding |
| 161 | ·····························································································································the·kernel·argument | 146 | ·····························································································································the·kernel·argument |
| 162 | ·····························································································································ensures·it·is·set·for | 147 | ·····························································································································ensures·it·is·set·for |
| 163 | ·····························································································································every·process·during | 148 | ·····························································································································every·process·during |
| 164 | ·····························································································································boot. | 149 | ·····························································································································boot. |
| 165 | ·····························································································································Misuse·of·privileged | ||
| 166 | ·····························································································································functions,·either | ||
| 167 | ·····························································································································intentionally·or | ||
| 168 | ·····························································································································unintentionally·by | ||
| 169 | ····························································································································· | 150 | ·····························································································································The·auditd·service·is |
| 170 | ·····························································································································unauthorized·external | ||
| 171 | ·····························································································································entities·that·have | ||
| 172 | ·····························································································································compromised·system | ||
| 173 | ·····························································································································accounts,·is·a·serious | ||
| 174 | ·····························································································································and·ongoing·concern·and | ||
| 175 | ····························································································································· | 151 | ·····························································································································an·access·monitoring |
| 152 | ··················Ensure·the·audit-··························································································and·accounting·daemon, | ||
| 176 | ····································At·a·minimum,·the·audit·system·should·collect·the·execution·of·privileged·commands·for···adverse·impacts·on | ||
| 177 | ··················Ensure·auditd·····all·users·and·root.·If·the·auditd·daemon·is·configured·to·use·the·augenrules·program·to··organizations.·Auditing | ||
| 178 | ··················Collects··········read·audit·rules·during·daemon·startup·(the·default),·add·a·line·of·the·following·form···the·use·of·privileged | ||
| 179 | ··················Information·on····to·a·file·with·suffix·.rules·in·the·directory·/etc/audit/rules.d:························functions·is·one·way·to | ||
| 180 | FAU_GEN.1.1.c·····the·Use·of········-a·always,exit·-F·path=/usr/bin/newgidmap·-F·auid>=1000·-F·auid!=unset·-F·key=privileged·detect·such·misuse·and | ||
| 181 | ··················Privileged········If·the·auditd·daemon·is·configured·to·use·the·auditctl·utility·to·read·audit·rules·······identify·the·risk·from | ||
| 182 | ··················Commands·-········during·daemon·startup,·add·a·line·of·the·following·form·to·/etc/audit/audit.rules:·······insider·and·advanced | ||
| 183 | ··················newgidmap·········-a·always,exit·-F·path=/usr/bin/newgidmap·-F·auid>=1000·-F·auid!=unset·-F·key=privileged·persistent·threats. | ||
| 184 | ·····························································································································Privileged·programs·are | ||
| 185 | ·····························································································································subject·to·escalation- | ||
| 186 | ·····························································································································of-privilege·attacks, | ||
| 187 | ·················· | 153 | ··················libs·package·as·a··························································································watching·system·calls |
| 188 | ·····························································································································subvert·their·normal | ||
| 189 | ·····························································································································role·of·providing·some | ||
| 190 | 154 | FAU_GEN.1·········part·of·audit·····The·audit-libs·package·should·be·installed.··············································to·audit·any·access,·in | |
| 155 | ··················Subsystem·is·······························································································comparison·with | ||
| 156 | ··················Installed··································································································potential·local·access | ||
| 191 | ·····························································································································c | 157 | ·····························································································································control·policy·such·as |
| 158 | ·····························································································································SELinux·policy. | ||
| 192 | ····························································································································· | 159 | ·····························································································································If·option·freq·isn't |
| Max diff block lines reached; 922310/946242 bytes (97.47%) of diff not shown. | |||
| Offset 73, 28 lines modified | Offset 73, 14 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 95 | ······<td·xml:lang="en-US"> | 81 | ······<td·xml:lang="en-US"> |
| 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 98 | GRUB2·command·line·for·the·Linux·operating·system. | 84 | GRUB2·command·line·for·the·Linux·operating·system. |
| 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 105, 14 lines modified | Offset 91, 28 lines modified | ||
| 105 | ······</td> | 91 | ······</td> |
| 106 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 108 | the·vulnerability·to·exploitation. | 94 | the·vulnerability·to·exploitation. |
| 109 | ······</td> | 95 | ······</td> |
| 110 | ····</tr> | 96 | ····</tr> |
| 111 | ····<tr> | 97 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 30 lines modified | Offset 157, 14 lines modified | ||
| 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. | 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. |
| 158 | any·packets·which·are·not·explicitly·permitted·should·not·be | 158 | any·packets·which·are·not·explicitly·permitted·should·not·be |
| 159 | accepted. | 159 | accepted. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | ||
| 165 | ······<td·xml:lang="en-US"> | ||
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | ||
| 168 | ······</td> | ||
| 169 | ······<td·xml:lang="en-US"> | ||
| 170 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | ||
| 171 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 172 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 176 | ······</td> | ||
| 177 | ····</tr> | ||
| 178 | ····<tr> | ||
| 179 | ······<td>Req-1.4.1</td> | ||
| 180 | ······<td>Install·iptables·Package</td> | 164 | ······<td>Install·iptables·Package</td> |
| 181 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| 183 | <pre> | 167 | <pre> |
| 184 | $·sudo·yum·install·iptables</pre> | 168 | $·sudo·yum·install·iptables</pre> |
| 185 | ······</td> | 169 | ······</td> |
| 186 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| Offset 202, 14 lines modified | Offset 186, 30 lines modified | ||
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | 186 | typically·critical·to·operation·of·the·system.·The·loopback·interface |
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 187 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | 188 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 205 | anti-spoofing·measure. | 189 | anti-spoofing·measure. |
| 206 | ······</td> | 190 | ······</td> |
| 207 | ····</tr> | 191 | ····</tr> |
| 208 | ····<tr> | 192 | ····<tr> |
| 193 | ······<td>Req-1.4.1</td> | ||
| 194 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | ||
| 195 | ······<td·xml:lang="en-US"> | ||
| 196 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 197 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | ||
| 198 | ······</td> | ||
| 199 | ······<td·xml:lang="en-US"> | ||
| 200 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | ||
| 201 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 202 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 203 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 204 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 205 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 206 | ······</td> | ||
| 207 | ····</tr> | ||
| 208 | ····<tr> | ||
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 213 | transport·layer·protocol,·designed·to·support·the·idea·of | 213 | transport·layer·protocol,·designed·to·support·the·idea·of |
| 214 | message-oriented·communication,·with·several·streams·of·messages | 214 | message-oriented·communication,·with·several·streams·of·messages |
| 215 | within·one·connection. | 215 | within·one·connection. |
| Offset 274, 14 lines modified | Offset 274, 41 lines modified | ||
| 274 | <br·/> | 274 | <br·/> |
| 275 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast | 275 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast |
| 276 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. | 276 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. |
| 277 | ······</td> | 277 | ······</td> |
| 278 | ····</tr> | 278 | ····</tr> |
| 279 | ····<tr> | 279 | ····<tr> |
| 280 | ······<td>Req-1.4.3</td> | 280 | ······<td>Req-1.4.3</td> |
| Max diff block lines reached; 293764/301496 bytes (97.44%) of diff not shown. | |||
| Offset 34, 14 lines modified | Offset 34, 26 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 41 | ····················································································Routing·protocol | 53 | ····················································································Routing·protocol |
| 42 | ····················································································daemons·are | 54 | ····················································································daemons·are |
| 43 | ····················································································typically·used·on | 55 | ····················································································typically·used·on |
| 44 | ····················································································routers·to·exchange | 56 | ····················································································routers·to·exchange |
| 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 49, 26 lines modified | Offset 61, 14 lines modified | ||
| 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 50 | ·····························sysctl.d:··············································required,·system | 62 | ·····························sysctl.d:··············································required,·system |
| 51 | ·····························net.ipv4.ip_forward·=·0································network·information | 63 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 52 | ····················································································may·be | 64 | ····················································································may·be |
| 53 | ····················································································unnecessarily | 65 | ····················································································unnecessarily |
| 54 | ····················································································transmitted·across | 66 | ····················································································transmitted·across |
| 55 | ····················································································the·network. | 67 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 40 lines modified | Offset 112, 14 lines modified | ||
| 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements | 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements |
| 113 | ·····························DefaultZone=drop·······································proper·design·for·a | 113 | ·····························DefaultZone=drop·······································proper·design·for·a |
| 114 | ····················································································firewall,·i.e.·any | 114 | ····················································································firewall,·i.e.·any |
| 115 | ····················································································packets·which·are | 115 | ····················································································packets·which·are |
| 116 | ····················································································not·explicitly | 116 | ····················································································not·explicitly |
| 117 | ····················································································permitted·should | 117 | ····················································································permitted·should |
| 118 | ····················································································not·be·accepted. | 118 | ····················································································not·be·accepted. |
| 119 | ····················································································A·TCP·SYN·flood | ||
| 120 | ····················································································attack·can·cause·a | ||
| 121 | ····················································································denial·of·service | ||
| 122 | ····················································································by·filling·a | ||
| 123 | ····················································································system's·TCP | ||
| 124 | ····················································································connection·table | ||
| 125 | ····················································································with·connections·in | ||
| 126 | ····················································································the·SYN_RCVD·state. | ||
| 127 | ····················································································Syncookies·can·be | ||
| 128 | ·····························To·set·the·runtime·status·of·the·······················used·to·track·a | ||
| 129 | ·····························net.ipv4.tcp_syncookies·kernel·parameter,·run·the······connection·when·a | ||
| 130 | ·········Enable·Kernel·······following·command:·····································subsequent·ACK·is | ||
| 131 | Req-·····Parameter·to·Use····$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1·············received,·verifying | ||
| 132 | 1.4.1····TCP·Syncookies·on···To·make·sure·that·the·setting·is·persistent,·add·the···the·initiator·is | ||
| 133 | ·········Network·Interfaces··following·line·to·a·file·in·the·directory·/etc/········attempting·a·valid | ||
| 134 | ·····························sysctl.d:··············································connection·and·is | ||
| 135 | ·····························net.ipv4.tcp_syncookies·=·1····························not·a·flood·source. | ||
| 136 | ····················································································This·feature·is | ||
| 137 | ····················································································activated·when·a | ||
| 138 | ····················································································flood·condition·is | ||
| 139 | ····················································································detected,·and | ||
| 140 | ····················································································enables·the·system | ||
| 141 | ····················································································to·continue | ||
| 142 | ····················································································servicing·valid | ||
| 143 | ····················································································connection | ||
| 144 | ····················································································requests. | ||
| 145 | ····················································································iptables·controls | 119 | ····················································································iptables·controls |
| 146 | ····················································································the·Linux·kernel | 120 | ····················································································the·Linux·kernel |
| 147 | ····················································································network·packet | 121 | ····················································································network·packet |
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. |
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | 123 | 1.4.1····Package·············following·command:·····································iptables·allows |
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to |
| 151 | ····················································································set·up·firewalls | 125 | ····················································································set·up·firewalls |
| Offset 164, 14 lines modified | Offset 138, 40 lines modified | ||
| 164 | ····················································································network·traffic | 138 | ····················································································network·traffic |
| 165 | ····················································································should·be·seen,·all | 139 | ····················································································should·be·seen,·all |
| 166 | ····················································································other·interfaces | 140 | ····················································································other·interfaces |
| 167 | ····················································································should·ignore | 141 | ····················································································should·ignore |
| 168 | ····················································································traffic·on·this | 142 | ····················································································traffic·on·this |
| 169 | ····················································································network·as·an·anti- | 143 | ····················································································network·as·an·anti- |
| 170 | ····················································································spoofing·measure. | 144 | ····················································································spoofing·measure. |
| 145 | ····················································································A·TCP·SYN·flood | ||
| 146 | ····················································································attack·can·cause·a | ||
| 147 | ····················································································denial·of·service | ||
| 148 | ····················································································by·filling·a | ||
| 149 | ····················································································system's·TCP | ||
| 150 | ····················································································connection·table | ||
| 151 | ····················································································with·connections·in | ||
| 152 | ····················································································the·SYN_RCVD·state. | ||
| 153 | ····················································································Syncookies·can·be | ||
| 154 | ·····························To·set·the·runtime·status·of·the·······················used·to·track·a | ||
| 155 | ·····························net.ipv4.tcp_syncookies·kernel·parameter,·run·the······connection·when·a | ||
| 156 | ·········Enable·Kernel·······following·command:·····································subsequent·ACK·is | ||
| 157 | Req-·····Parameter·to·Use····$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1·············received,·verifying | ||
| 158 | 1.4.1····TCP·Syncookies·on···To·make·sure·that·the·setting·is·persistent,·add·the···the·initiator·is | ||
| 159 | ·········Network·Interfaces··following·line·to·a·file·in·the·directory·/etc/········attempting·a·valid | ||
| 160 | ·····························sysctl.d:··············································connection·and·is | ||
| 161 | ·····························net.ipv4.tcp_syncookies·=·1····························not·a·flood·source. | ||
| 162 | ····················································································This·feature·is | ||
| 163 | ····················································································activated·when·a | ||
| 164 | ····················································································flood·condition·is | ||
| 165 | ····················································································detected,·and | ||
| 166 | ····················································································enables·the·system | ||
| 167 | ····················································································to·continue | ||
| 168 | ····················································································servicing·valid | ||
| 169 | ····················································································connection | ||
| Max diff block lines reached; 490867/503502 bytes (97.49%) of diff not shown. | |||
| Offset 121, 216 lines modified | Offset 121, 216 lines modified | ||
| 00000780:·6c20·746f·2075·6e69·6e74·656e·7469·6f6e··l·to·unintention | 00000780:·6c20·746f·2075·6e69·6e74·656e·7469·6f6e··l·to·unintention | ||
| 00000790:·616c·6c79·2065·7865·6375·7465·2063·6f64··ally·execute·cod | 00000790:·616c·6c79·2065·7865·6375·7465·2063·6f64··ally·execute·cod | ||
| 000007a0:·6520·696e·206c·6573·7320·7072·6976·696c··e·in·less·privil | 000007a0:·6520·696e·206c·6573·7320·7072·6976·696c··e·in·less·privil | ||
| 000007b0:·6567·6564·206d·656d·6f72·7920·7370·6163··eged·memory·spac | 000007b0:·6567·6564·206d·656d·6f72·7920·7370·6163··eged·memory·spac | ||
| 000007c0:·652e·0a20·2020·2020·203c·2f74·643e·0a20··e..······</td>.· | 000007c0:·652e·0a20·2020·2020·203c·2f74·643e·0a20··e..······</td>.· | ||
| 000007d0:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | 000007d0:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | ||
| 000007e0:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | 000007e0:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | ||
| 000007f0:·7464·3e0a·2020·2020·2020·3c74·643e· | 000007f0:·7464·3e0a·2020·2020·2020·3c74·643e·5072··td>.······<td>Pr | ||
| 00000800:·6566·6572·2074·6f20·7573·6520·6120·3634··efer·to·use·a·64 | |||
| 00000810:·2d62·6974·204f·7065·7261·7469·6e67·2053··-bit·Operating·S | |||
| 00000800:·7374·616c·6c20·7468·6520·6472·6163·7574··stall·the·dracut | |||
| 00000810:·2d66·6970·732d·6165·736e·6920·5061·636b··-fips-aesni·Pack | |||
| 00000820:·6167·653c·2f74·643e·0a20·2020·2020·203c··age</td>.······< | |||
| 00000830:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | |||
| 00000840:·5553·223e·0a20·2020·2020·2020·2054·6f20··US">.········To· | |||
| 00000850:·656e·6162·6c65·2046·4950·5320·6f6e·2073··enable·FIPS·on·s | |||
| 000008 | 00000820:·7973·7465·6d20·7768·656e·2073·7570·706f··ystem·when·suppo | ||
| 00000870:·7274·2074·6865·2041·6476·616e·6365·6420··rt·the·Advanced· | |||
| 00000880:·456e·6372·7970·7469·6f6e·2053·7461·6e64··Encryption·Stand | |||
| 00000890:·6172·6420·2841·4553·2920·6f72·204e·6577··ard·(AES)·or·New | |||
| 000008a0:·0a49·6e73·7472·7563·7469·6f6e·7320·2841··.Instructions·(A | |||
| 000008b0:·4553·2d4e·4929·2065·6e67·696e·652c·2074··ES-NI)·engine,·t | |||
| 000008c0:·6865·2073·7973·7465·6d20·7265·7175·6972··he·system·requir | |||
| 000008d0:·6573·2074·6861·7420·7468·6520·3c74·743e··es·that·the·<tt> | |||
| 000008e0:·6472·6163·7574·2d66·6970·732d·6165·736e··dracut-fips-aesn | |||
| 000008f0:·693c·2f74·743e·0a70·6163·6b61·6765·2062··i</tt>.package·b | |||
| 00000900:·6520·696e·7374·616c·6c65·642e·0a54·6865··e·installed..The | |||
| 00000910:·203c·636f·6465·3e64·7261·6375·742d·6669···<code>dracut-fi | |||
| 00000920:·7073·2d61·6573·6e69·3c2f·636f·6465·3e20··ps-aesni</code>· | |||
| 00000930:·7061·636b·6167·6520·6361·6e20·6265·2069··package·can·be·i | |||
| 00000940:·6e73·7461·6c6c·6564·2077·6974·6820·7468··nstalled·with·th | |||
| 00000950:·6520·666f·6c6c·6f77·696e·6720·636f·6d6d··e·following·comm | |||
| 00000960:·616e·643a·0a3c·7072·653e·0a24·2073·7564··and:.<pre>.$·sud | |||
| 00000970:·6f20·7975·6d20·696e·7374·616c·6c20·6472··o·yum·install·dr | |||
| 00000980:·6163·7574·2d66·6970·732d·6165·736e·693c··acut-fips-aesni< | |||
| 00000990:·2f70·7265·3e0a·2020·2020·2020·3c2f·7464··/pre>.······</td | |||
| 000009a0:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 000009b0:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 000009c0:·2020·2020·2020·5573·6520·6f66·2077·6561········Use·of·wea | |||
| 000009d0:·6b20·6f72·2075·6e74·6573·7465·6420·656e··k·or·untested·en | |||
| 000009e0:·6372·7970·7469·6f6e·2061·6c67·6f72·6974··cryption·algorit | |||
| 000009f0:·686d·7320·756e·6465·726d·696e·6573·2074··hms·undermines·t | |||
| 00000a00:·6865·2070·7572·706f·7365·7320·6f66·2075··he·purposes·of·u | |||
| 00000a10:·7469·6c69·7a69·6e67·2065·6e63·7279·7074··tilizing·encrypt | |||
| 00000a20:·696f·6e20·746f·0a70·726f·7465·6374·2064··ion·to.protect·d | |||
| 00000a30:·6174·612e·2054·6865·206f·7065·7261·7469··ata.·The·operati | |||
| 00000a40:·6e67·2073·7973·7465·6d20·6d75·7374·2069··ng·system·must·i | |||
| 00000a50:·6d70·6c65·6d65·6e74·2063·7279·7074·6f67··mplement·cryptog | |||
| 00000a60:·7261·7068·6963·206d·6f64·756c·6573·2061··raphic·modules·a | |||
| 00000a70:·6468·6572·696e·6720·746f·2074·6865·2068··dhering·to·the·h | |||
| 00000a80:·6967·6865·720a·7374·616e·6461·7264·7320··igher.standards· | |||
| 00000a90:·6170·7072·6f76·6564·2062·7920·7468·6520··approved·by·the· | |||
| 00000aa0:·6665·6465·7261·6c20·676f·7665·726e·6d65··federal·governme | |||
| 00000ab0:·6e74·2073·696e·6365·2074·6869·7320·7072··nt·since·this·pr | |||
| 00000ac0:·6f76·6964·6573·2061·7373·7572·616e·6365··ovides·assurance | |||
| 00000ad0:·2074·6865·7920·6861·7665·2062·6565·6e20···they·have·been· | |||
| 00000ae0:·7465·7374·6564·0a61·6e64·2076·616c·6964··tested.and·valid | |||
| 00000af0:·6174·6564·2e0a·2020·2020·2020·3c2f·7464··ated..······</td | |||
| 00000b00:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | |||
| 00000b10:·3c74·723e·0a20·2020·2020·203c·7464·3e52··<tr>.······<td>R | |||
| 00000b20:·313c·2f74·643e·0a20·2020·2020·203c·7464··1</td>.······<td | |||
| 00000b30:·3e45·6e73·7572·6520·534d·4150·2069·7320··>Ensure·SMAP·is· | |||
| 00000b40:·6e6f·7420·6469·7361·626c·6564·2064·7572··not·disabled·dur | |||
| 00000b50:·696e·6720·626f·6f74·3c2f·7464·3e0a·2020··ing·boot</td>.·· | |||
| 00000b60:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | |||
| 00000b70:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | |||
| 00000b80:·2020·5468·6520·534d·4150·2069·7320·7573····The·SMAP·is·us | |||
| 00000b90:·6564·2074·6f20·7072·6576·656e·7420·7468··ed·to·prevent·th | |||
| 00000ba0:·6520·7375·7065·7276·6973·6f72·206d·6f64··e·supervisor·mod | |||
| 00000bb0:·6520·6672·6f6d·2075·6e69·6e74·656e·7469··e·from·unintenti | |||
| 00000bc0:·6f6e·616c·6c79·2072·6561·6469·6e67·2f77··onally·reading/w | |||
| 00000bd0:·7269·7469·6e67·2069·6e74·6f0a·6d65·6d6f··riting·into.memo | |||
| 00000be0:·7279·2070·6167·6573·2069·6e20·7468·6520··ry·pages·in·the· | |||
| 00000bf0:·7573·6572·2073·7061·6365·2c20·6974·2069··user·space,·it·i | |||
| 00000c00:·7320·656e·6162·6c65·6420·6279·2064·6566··s·enabled·by·def | |||
| 00000c10:·6175·6c74·2073·696e·6365·204c·696e·7578··ault·since·Linux | |||
| 00000c20:·206b·6572·6e65·6c20·332e·372e·0a42·7574···kernel·3.7..But | |||
| 00000c30:·2069·7420·636f·756c·6420·6265·2064·6973···it·could·be·dis | |||
| 00000c40:·6162·6c65·6420·7468·726f·7567·6820·6b65··abled·through·ke | |||
| 00000c50:·726e·656c·2062·6f6f·7420·7061·7261·6d65··rnel·boot·parame | |||
| 00000c60:·7465·7273·2e0a·0a45·6e73·7572·6520·7468··ters...Ensure·th | |||
| 00000c70:·6174·2053·7570·6572·7669·736f·7220·4d6f··at·Supervisor·Mo | |||
| 00000c80:·6465·2041·6363·6573·7320·5072·6576·656e··de·Access·Preven | |||
| 00000c90:·7469·6f6e·2028·534d·4150·2920·6973·206e··tion·(SMAP)·is·n | |||
| 00000ca0:·6f74·2064·6973·6162·6c65·6420·6279·0a74··ot·disabled·by.t | |||
| 00000cb0:·6865·203c·7474·3e6e·6f73·6d61·703c·2f74··he·<tt>nosmap</t | |||
| 00000cc0:·743e·2062·6f6f·7420·7061·7261·6d65·6e74··t>·boot·parament | |||
| 00000cd0:·6572·206f·7074·696f·6e2e·0a0a·4368·6563··er·option...Chec | |||
| 00000ce0:·6b20·7468·6174·2074·6865·206c·696e·6520··k·that·the·line· | |||
| 00000cf0:·3c70·7265·3e47·5255·425f·434d·444c·494e··<pre>GRUB_CMDLIN | |||
| 00000d00:·455f·4c49·4e55·583d·222e·2e2e·223c·2f70··E_LINUX="..."</p | |||
| 00000d10:·7265·3e20·7769·7468·696e·203c·7474·3e2f··re>·within·<tt>/ | |||
| 00000d20:·6574·632f·6465·6661·756c·742f·6772·7562··etc/default/grub | |||
| 00000d30:·3c2f·7474·3e0a·646f·6573·6e27·7420·636f··</tt>.doesn't·co | |||
| 00000d40:·6e74·6169·6e20·7468·6520·6172·6775·6d65··ntain·the·argume | |||
| 00000d50:·6e74·203c·7474·3e6e·6f73·6d61·703c·2f74··nt·<tt>nosmap</t | |||
| 00000d60:·743e·2e0a·5275·6e20·7468·6520·666f·6c6c··t>..Run·the·foll | |||
| 00000d70:·6f77·696e·6720·636f·6d6d·616e·6420·746f··owing·command·to | |||
| 00000d80:·2075·7064·6174·6520·636f·6d6d·616e·6420···update·command· | |||
| 00000d90:·6c69·6e65·2066·6f72·2061·6c72·6561·6479··line·for·already | |||
| 00000da0:·2069·6e73·7461·6c6c·6564·206b·6572·6e65···installed·kerne | |||
| 00000db0:·6c73·3a0a·3c70·7265·3e23·2067·7275·6262··ls:.<pre>#·grubb | |||
| 00000dc0:·7920·2d2d·7570·6461·7465·2d6b·6572·6e65··y·--update-kerne | |||
| 00000dd0:·6c3d·414c·4c20·2d2d·7265·6d6f·7665·2d61··l=ALL·--remove-a | |||
| 00000de0:·7267·733d·226e·6f73·6d61·7022·3c2f·7072··rgs="nosmap"</pr | |||
| 00000df0:·653e·0a20·2020·2020·203c·2f74·643e·0a20··e>.······</td>.· | |||
| 00000e00:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | |||
| 00000e10:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | |||
| 00000e20:·2020·2044·6973·6162·6c69·6e67·2053·4d41·····Disabling·SMA | |||
| 00000e30:·5020·6361·6e20·6661·6369·6c69·7461·7465··P·can·facilitate | |||
| 00000e40:·2065·7870·6c6f·6974·6174·696f·6e20·6f66···exploitation·of | |||
| 00000e50:·2076·756c·6e65·7261·6269·6c69·7469·6573···vulnerabilities | |||
| 00000e60:·2063·6175·7365·6420·6279·2075·6e69·6e74···caused·by·unint | |||
| 00000e70:·656e·6465·6420·6163·6365·7373·2061·6e64··ended·access·and | |||
| 00000e80:·0a6d·616e·6970·756c·6174·696f·6e20·6f66··.manipulation·of | |||
| 00000e90:·2064·6174·6120·696e·2074·6865·2075·7365···data·in·the·use | |||
| 00000ea0:·7220·7370·6163·652e·0a20·2020·2020·203c··r·space..······< | |||
| 00000eb0:·2f74·643e·0a20·2020·203c·2f74·723e·0a20··/td>.····</tr>.· | |||
| 00000ec0:·2020·203c·7472·3e0a·2020·2020·2020·3c74·····<tr>.······<t | |||
| 00000 | 00000830:·7274·6564·3c2f·7464·3e0a·2020·2020·2020··rted</td>.······ | ||
| 00000ee0:·3c74·643e·5072·6566·6572·2074·6f20·7573··<td>Prefer·to·us | |||
| 00000ef0:·6520·6120·3634·2d62·6974·204f·7065·7261··e·a·64-bit·Opera | |||
| 00000f00:·7469·6e67·2053·7973·7465·6d20·7768·656e··ting·System·when | |||
| 00000f10:·2073·7570·706f·7274·6564·3c2f·7464·3e0a···supported</td>. | |||
| 00000f20:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | |||
| 00000f30:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | |||
| 00000f40:·2020·2020·5072·6566·6572·2069·6e73·7461······Prefer·insta | |||
| Max diff block lines reached; 2957119/2985571 bytes (99.05%) of diff not shown. | |||
| Offset 15, 39 lines modified | Offset 15, 14 lines modified | ||
| 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 17 | ······························argument·nosmep.·Run·the·following·command | 17 | ······························argument·nosmep.·Run·the·following·command |
| 18 | ······························to·update·command·line·for·already·installed | 18 | ······························to·update·command·line·for·already·installed |
| 19 | ······························kernels: | 19 | ······························kernels: |
| 20 | ······························#·grubby·--update-kernel=ALL·--remove- | 20 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 21 | ······························args="nosmep" | 21 | ······························args="nosmep" |
| 22 | ···········································································Use·of·weak·or·untested·encryption | ||
| 23 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 24 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 25 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 26 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 27 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 28 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 29 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 30 | ···········································································validated. | ||
| 31 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 32 | ······························mode·from·unintentionally·reading/writing | ||
| 33 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 34 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 35 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 36 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 37 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 38 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 39 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 40 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 41 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 42 | ······························argument·nosmap.·Run·the·following·command | ||
| 43 | ······························to·update·command·line·for·already·installed | ||
| 44 | ······························kernels: | ||
| 45 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 46 | ······························args="nosmap" | ||
| 47 | ···········································································Use·of·a·64-bit·operating·system | 22 | ···········································································Use·of·a·64-bit·operating·system |
| 48 | ···········································································offers·a·few·advantages,·like·a·larger | 23 | ···········································································offers·a·few·advantages,·like·a·larger |
| 49 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | 24 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space |
| 50 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | 25 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and |
| 51 | ····supported······························································systematic·presence·of·No·eXecute·and | 26 | ····supported······························································systematic·presence·of·No·eXecute·and |
| 52 | ···········································································Execute·Disable·(NX/XD)·protection | 27 | ···········································································Execute·Disable·(NX/XD)·protection |
| 53 | ···········································································bits. | 28 | ···········································································bits. |
| Offset 62, 14 lines modified | Offset 37, 39 lines modified | ||
| 62 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 37 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 63 | ······························installed·with·the·following·command:········(NX)·support. | 38 | ······························installed·with·the·following·command:········(NX)·support. |
| 64 | ······························$·sudo·yum·install·kernel-PAE | 39 | ······························$·sudo·yum·install·kernel-PAE |
| 65 | ······························The·installation·process·should·also·have | 40 | ······························The·installation·process·should·also·have |
| 66 | ······························configured·the·bootloader·to·load·the·new | 41 | ······························configured·the·bootloader·to·load·the·new |
| 67 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 42 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 68 | ······························modify·/etc/default/grub·if·necessary. | 43 | ······························modify·/etc/default/grub·if·necessary. |
| 44 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 45 | ······························mode·from·unintentionally·reading/writing | ||
| 46 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 47 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 48 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 49 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 50 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 51 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 52 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 53 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 54 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 55 | ······························argument·nosmap.·Run·the·following·command | ||
| 56 | ······························to·update·command·line·for·already·installed | ||
| 57 | ······························kernels: | ||
| 58 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 59 | ······························args="nosmap" | ||
| 60 | ···········································································Use·of·weak·or·untested·encryption | ||
| 61 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 68 | ···········································································validated. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 45 lines modified | Offset 99, 59 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·poisoning·of·SLUB/SLAB·objects, | ||
| 107 | ······························add·the·argument·slub_debug=P·to·the·default | ||
| 108 | ······························GRUB·2·command·line·for·the·Linux·operating··Poisoning·writes·an·arbitrary·value·to | ||
| 109 | ······························system.·To·ensure·that·slub_debug=P·is·added·freed·objects,·so·any·modification·or | ||
| 106 | ······························Certain·CPUs·are·vulnerable·to·an·exploit | ||
| 107 | ······························against·a·common·wide·industry·wide | ||
| 108 | ······························performance·optimization·known·as | ||
| 109 | ······························Speculative·Store·Bypass·(SSB).·In·such | ||
| 110 | ······························cases,·recent·stores·to·the·same·memory | ||
| 111 | ······························location·cannot·always·be·observed·by·later | ||
| 112 | ······························loads·during·speculative·execution.·However, | ||
| 113 | ······························such·stores·are·unlikely·and·thus·they·can | ||
| 114 | ······························be·detected·prior·to·instruction·retirement | ||
| 115 | ······························at·the·end·of·a·particular·speculation | ||
| 116 | ······························execution·window.·Since·Linux·Kernel·4.17 | ||
| 117 | ······························you·can·check·the·SSB·mitigation·state·with | ||
| 118 | ······························the·following·command:·cat·/sys/devices/·····In·vulnerable·processsors,·the | ||
| 119 | ······························system/cpu/vulnerabilities/spec_store_bypass·speculatively·forwarded·store·can·be | ||
| 120 | ····Configure·Speculative·····Select·the·appropriate·SSB·state·by·adding···used·in·a·cache·side·channel·attack. | ||
| 121 | R8··Store·Bypass·Mitigation···the·argument·spec_store_bypass_disable=prctl·An·example·of·this·is·reading·memory | ||
| 122 | ······························to·the·default·GRUB·2·command·line·for·the···to·which·the·attacker·does·not | ||
| 123 | ······························Linux·operating·system.·To·ensure·that·······directly·have·access,·for·example | ||
| 124 | ······························spec_store_bypass_disable=prctl·is·added·as··inside·the·sandboxed·code. | ||
| 125 | ······························a·kernel·command·line·argument·to·newly | 110 | ······························as·a·kernel·command·line·argument·to·newly···reference·to·that·object·after·being |
| 111 | ······························installed·kernels,·add·slub_debug=P·to·the···freed·or·before·being·initialized·will | ||
| 112 | R8··Enable·SLUB/SLAB··········default·Grub2·command·line·for·Linux·········be·detected·and·prevented.·This | ||
| 113 | ····allocator·poisoning·······operating·systems.·Modify·the·line·within·/··prevents·many·types·of·use-after-free | ||
| 114 | ······························etc/default/grub·as·shown·below:·············vulnerabilities·at·little·performance | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·slub_debug=P·..."····cost.·Also·prevents·leak·of·data·and | ||
| 116 | ······························Run·the·following·command·to·update·command··detection·of·corrupted·memory. | ||
| 126 | ······························installed·kernels | 117 | ······························line·for·already·installed·kernels: |
| 127 | ······························spec_store_bypass_disable=prctl·to·the | ||
| 128 | ······························ | 118 | ······························#·grubby·--update-kernel=ALL·-- |
| 119 | ······························args="slub_debug=P" | ||
| 120 | ······························L1·Terminal·Fault·(L1TF)·is·a·hardware | ||
| 121 | ······························vulnerability·which·allows·unprivileged | ||
| 122 | ······························speculative·access·to·data·which·is | ||
| 123 | ······························available·in·the·Level·1·Data·Cache·when·the | ||
| 124 | ······························page·table·entry·isn't·present.·Select·the | ||
| 125 | ······························appropriate·mitigation·by·adding·the | ||
| Max diff block lines reached; 656779/669268 bytes (98.13%) of diff not shown. | |||
| Offset 40, 71 lines modified | Offset 40, 32 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Oracle·Linux·8's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1</td> | ||
| 74 | ······<td>Disable·GDM·Guest·Login</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·login·without·credentials | ||
| 77 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 78 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 79 | timed·logins·or·guest·account·access,·set·the·<tt>TimedLoginEnable</tt>·to·<tt>false</tt>·in | ||
| 80 | the·<tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 81 | <pre>[daemon] | ||
| 82 | TimedLoginEnable=false</pre> | ||
| 83 | ······</td> | ||
| 84 | ······<td·xml:lang="en-US"> | ||
| 85 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 86 | system·security. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 90 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 91 | ······<td> | 48 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 92 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 93 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 94 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 95 | <pre>vc/1 | ||
| 96 | vc/2 | ||
| 97 | vc/3 | ||
| 98 | 50 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | |
| 51 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 52 | their·UID·changed. | ||
| 53 | <br·/> | ||
| 54 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 55 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 56 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 57 | assigned. | ||
| 99 | ······</td> | 58 | ······</td> |
| 100 | ······<td·xml:lang="en-US"> | 59 | ······<td·xml:lang="en-US"> |
| 101 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 102 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 103 | usi | 60 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts |
| 61 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 62 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 63 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 64 | access·to·root·privileges·in·an·accountable·manner. | ||
| 104 | ······</td> | 65 | ······</td> |
| 105 | ····</tr> | 66 | ····</tr> |
| 106 | ····<tr> | 67 | ····<tr> |
| 107 | ······<td>3.1.1<br/>3.1.5</td> | 68 | ······<td>3.1.1<br/>3.1.5</td> |
| 108 | ······<td>Disable·SSH·Root·Login</td> | 69 | ······<td>Disable·SSH·Root·Login</td> |
| 109 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 110 | ········The·root·user·should·never·be·allowed·to·login·to·a | 71 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| Offset 121, 32 lines modified | Offset 82, 28 lines modified | ||
| 121 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | 82 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. |
| 122 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 83 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 123 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 84 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 124 | direct·attack·attempts·on·root's·password. | 85 | direct·attack·attempts·on·root's·password. |
| 125 | ······</td> | 86 | ······</td> |
| 126 | ····</tr> | 87 | ····</tr> |
| 127 | ····<tr> | 88 | ····<tr> |
| 128 | ······<td>3.1.1<br/>3. | 89 | ······<td>3.1.1<br/>3.4.5</td> |
| 129 | ······<td> | 90 | ······<td>Require·Authentication·for·Emergency·Systemd·Target</td> |
| 130 | ······<td·xml:lang="en-US"> | 91 | ······<td·xml:lang="en-US"> |
| 92 | ········Emergency·mode·is·intended·as·a·system·recovery | ||
| 93 | method,·providing·a·single·user·root·access·to·the·system | ||
| 94 | during·a·failed·boot·sequence. | ||
| 95 | <br·/><br·/> | ||
| 96 | By·default,·Emergency·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 97 | in·<tt>/usr/lib/systemd/system/emergency.service</tt>. | ||
| 131 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 132 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 133 | their·UID·changed. | ||
| 134 | <br·/> | ||
| 135 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 136 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 137 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 138 | assigned. | ||
| 139 | ······</td> | 98 | ······</td> |
| 140 | ······<td·xml:lang="en-US"> | 99 | ······<td·xml:lang="en-US"> |
| 100 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 101 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 102 | by·configuring·the·bootloader·password. | ||
| 141 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 142 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 143 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 144 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 145 | access·to·root·privileges·in·an·accountable·manner. | ||
| 146 | ······</td> | 103 | ······</td> |
| 147 | ····</tr> | 104 | ····</tr> |
| 148 | ····<tr> | 105 | ····<tr> |
| 149 | ······<td>3.1.1</td> | 106 | ······<td>3.1.1</td> |
| 150 | ······<td>Disable·GDM·Automatic·Login</td> | 107 | ······<td>Disable·GDM·Automatic·Login</td> |
| 151 | ······<td·xml:lang="en-US"> | 108 | ······<td·xml:lang="en-US"> |
| 152 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | 109 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| Offset 159, 43 lines modified | Offset 116, 28 lines modified | ||
| 159 | ······</td> | 116 | ······</td> |
| 160 | ······<td·xml:lang="en-US"> | 117 | ······<td·xml:lang="en-US"> |
| Max diff block lines reached; 452893/458808 bytes (98.71%) of diff not shown. | |||
| Offset 1, 48 lines modified | Offset 1, 31 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of |
| 2 | Oracle·Linux·8 | 2 | Oracle·Linux·8 |
| 3 | ·······································To·further·limit·access·to·the·root·account, | ||
| 4 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 5 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 6 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 7 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 8 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 9 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 10 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 11 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 12 | ·······································plain·text·over·the·network.·By·default,·Oracle·Linux··login,·then·escalate | ||
| 13 | ·······································8's·/etc/securetty·file·only·allows·the·root·user·to···to·privileged·(root) | ||
| 14 | ·······································login·at·the·console·physically·attached·to·the········access·via·su·/ | ||
| 15 | ·······································system.·To·prevent·root·from·logging·in,·remove·the····sudo.·This·is | ||
| 16 | ·······································contents·of·this·file.·To·prevent·direct·root·logins,··required·for·FISMA | ||
| 17 | ·······································remove·the·contents·of·this·file·by·typing·the·········Low·and·FISMA | ||
| 18 | ·······································following·command:·····································Moderate·systems. | ||
| 19 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 20 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 21 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 22 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 23 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 24 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 25 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 26 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 27 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 28 | ·······································[daemon] | ||
| 29 | ·······································TimedLoginEnable=false | ||
| 30 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 31 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 32 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 33 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 34 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 35 | ·······································vc/3···················································actions·taken·on·the | ||
| 36 | ·······································vc/4···················································system·using·the | ||
| 37 | ······························································································ | 3 | ······························································································An·account·has·root |
| 4 | ······························································································authority·if·it·has | ||
| 5 | ······························································································a·UID·of·0.·Multiple | ||
| 6 | ······························································································accounts·with·a·UID | ||
| 7 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | ||
| 8 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | ||
| 9 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | ||
| 10 | ·······································their·UID·changed.·····································to·guess·a·password | ||
| 11 | 3.1.1···Verify·Only·Root·Has·UID·0·····If·the·account·is·associated·with·system·commands·or···for·a·privileged | ||
| 12 | 3.1.5··································applications·the·UID·should·be·changed·to·one·greater··account.·Proper | ||
| 13 | ·······································than·"0"·but·less·than·"1000."·Otherwise·assign·a·UID··configuration·of | ||
| 14 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | ||
| 15 | ·······································assigned.··············································to·afford·multiple | ||
| 16 | ······························································································system | ||
| 17 | ······························································································administrators | ||
| 18 | ······························································································access·to·root | ||
| 19 | ······························································································privileges·in·an | ||
| 20 | ······························································································accountable·manner. | ||
| 38 | ······························································································Even·though·the | 21 | ······························································································Even·though·the |
| 39 | ······························································································communications | 22 | ······························································································communications |
| 40 | ······························································································channel·may·be | 23 | ······························································································channel·may·be |
| 41 | ······························································································encrypted,·an | 24 | ······························································································encrypted,·an |
| 42 | ······························································································additional·layer·of | 25 | ······························································································additional·layer·of |
| 43 | ······························································································security·is·gained | 26 | ······························································································security·is·gained |
| 44 | ······························································································by·extending·the | 27 | ······························································································by·extending·the |
| Offset 56, 61 lines modified | Offset 39, 45 lines modified | ||
| 56 | ······························································································accountability·of | 39 | ······························································································accountability·of |
| 57 | ······························································································actions·performed·on | 40 | ······························································································actions·performed·on |
| 58 | ······························································································the·system·and·also | 41 | ······························································································the·system·and·also |
| 59 | ······························································································helps·to·minimize | 42 | ······························································································helps·to·minimize |
| 60 | ······························································································direct·attack | 43 | ······························································································direct·attack |
| 61 | ······························································································attempts·on·root's | 44 | ······························································································attempts·on·root's |
| 62 | ······························································································password. | 45 | ······························································································password. |
| 63 | ······························································································An·account·has·root | ||
| 64 | ······························································································authority·if·it·has | ||
| 65 | ······························································································a·UID·of·0.·Multiple | ||
| 66 | ······························································································accounts·with·a·UID | ||
| 67 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | ||
| 68 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | ||
| 69 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | ||
| 70 | ·······································their·UID·changed.·····································to·guess·a·password | ||
| 71 | 3.1.1···Verify·Only·Root·Has·UID·0·····If·the·account·is·associated·with·system·commands·or···for·a·privileged | ||
| 72 | 3.1.5··································applications·the·UID·should·be·changed·to·one·greater··account.·Proper | ||
| 73 | ·······································than·"0"·but·less·than·"1000."·Otherwise·assign·a·UID··configuration·of | ||
| 74 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | ||
| 75 | ·······································assigned.··············································to·afford·multiple | ||
| 76 | ······························································································s | 46 | ······························································································This·prevents |
| 77 | ······························································································administrators | ||
| 78 | ······························································································a | 47 | ······························································································attackers·with |
| 48 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | ||
| 49 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 50 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | ||
| 51 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | ||
| 52 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | ||
| 53 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | ||
| 79 | ······································· | 54 | ·······································emergency.service.·····································prevented·by |
| 80 | ······························································································ | 55 | ······························································································configuring·the |
| 56 | ······························································································bootloader·password. | ||
| 81 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 57 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 82 | ·······································automatically·login·without·user·interaction·or | 58 | ·······································automatically·login·without·user·interaction·or |
| 83 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | 59 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict |
| 84 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | 60 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to |
| 85 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | 61 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users |
| 86 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | 62 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts |
| 87 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system | 63 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system |
| 88 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. | 64 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. |
| 89 | ·······································[daemon] | 65 | ·······································[daemon] |
| 90 | ·······································AutomaticLoginEnable=false | 66 | ·······································AutomaticLoginEnable=false |
| 67 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 68 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 69 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 70 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 71 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 72 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 73 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 74 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 75 | ·······································[daemon] | ||
| 76 | ·······································TimedLoginEnable=false | ||
| 91 | ······························································································Preventing·direct | ||
| 92 | ······························································································root·login·to·serial | ||
| 93 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 94 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 95 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 96 | ·······································ttyS1··················································actions·taken·on·the | ||
| 97 | ······························································································systems·using·the | ||
| 98 | ······························································································root·account. | ||
| 99 | ······························································································This·prevents | ||
| Max diff block lines reached; 807467/822353 bytes (98.19%) of diff not shown. | |||
| Offset 4102, 15 lines modified | Offset 4102, 15 lines modified | ||
| 4102 | <tt>RekeyLimit</tt>. | 4102 | <tt>RekeyLimit</tt>. |
| 4103 | ··</td> | 4103 | ··</td> |
| 4104 | ··<td·xml:lang="en-US"> | 4104 | ··<td·xml:lang="en-US"> |
| 4105 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4105 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4106 | time-based·limit,·effects·of·potential·attacks·against | 4106 | time-based·limit,·effects·of·potential·attacks·against |
| 4107 | encryption·keys·are·limited. | 4107 | encryption·keys·are·limited. |
| 4108 | ··</td> | 4108 | ··</td> |
| 4109 | ··<td>var_ssh_client_rekey_limit_ | 4109 | ··<td>var_ssh_client_rekey_limit_time=1hour<br/>var_ssh_client_rekey_limit_size=1G</td> |
| 4110 | </tr> | 4110 | </tr> |
| 4111 | <tr> | 4111 | <tr> |
| 4112 | ··<td></td> | 4112 | ··<td></td> |
| 4113 | ··<td>N/A</td> | 4113 | ··<td>N/A</td> |
| 4114 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> | 4114 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> |
| 4115 | ··<td·xml:lang="en-US"> | 4115 | ··<td·xml:lang="en-US"> |
| 4116 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure | 4116 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure |
| Offset 3301, 16 lines modified | Offset 3301, 16 lines modified | ||
| 3301 | ·····A··rsyslog·remote···echo·'global(DefaultNetstreamDriverCAFile="/etc/pki/tls/cert.pem")'·>>·/etc/rsyslog.conf·error:·ca | 3301 | ·····A··rsyslog·remote···echo·'global(DefaultNetstreamDriverCAFile="/etc/pki/tls/cert.pem")'·>>·/etc/rsyslog.conf·error:·ca |
| 3302 | ········logging··········Replace·the·/etc/pki/tls/cert.pem·in·the·above·command·with·the·path·to·the·file·with·CA·certificate·is·not | 3302 | ········logging··········Replace·the·/etc/pki/tls/cert.pem·in·the·above·command·with·the·path·to·the·file·with·CA·certificate·is·not |
| 3303 | ·························certificate·generated·for·the·purpose·of·remote·logging.·································set,·cannot | 3303 | ·························certificate·generated·for·the·purpose·of·remote·logging.·································set,·cannot |
| 3304 | ··················································································································continue | 3304 | ··················································································································continue |
| 3305 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the | 3305 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the |
| 3306 | ·························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the | 3306 | ·························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the |
| 3307 | ········Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and | 3307 | ········Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and |
| 3308 | ·····N/·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_ | 3308 | ·····N/·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_time=1hour |
| 3309 | ·····A··renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_ | 3309 | ·····A··renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_size=1G |
| 3310 | ········for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks | 3310 | ········for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks |
| 3311 | ·························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption | 3311 | ·························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption |
| 3312 | ·························containing·definition·of·RekeyLimit.·····················································keys·are·limited. | 3312 | ·························containing·definition·of·RekeyLimit.·····················································keys·are·limited. |
| 3313 | ··················································································································Some·SSH | 3313 | ··················································································································Some·SSH |
| 3314 | ··················································································································implementations·use | 3314 | ··················································································································implementations·use |
| 3315 | ··················································································································the·openssl·library | 3315 | ··················································································································the·openssl·library |
| 3316 | ··················································································································for·entropy,·which | 3316 | ··················································································································for·entropy,·which |
| Offset 24360, 17 lines modified | Offset 24360, 17 lines modified | ||
| 0005f270:·0a74·696d·652d·6261·7365·6420·6c69·6d69··.time-based·limi | 0005f270:·0a74·696d·652d·6261·7365·6420·6c69·6d69··.time-based·limi | ||
| 0005f280:·742c·2065·6666·6563·7473·206f·6620·706f··t,·effects·of·po | 0005f280:·742c·2065·6666·6563·7473·206f·6620·706f··t,·effects·of·po | ||
| 0005f290:·7465·6e74·6961·6c20·6174·7461·636b·7320··tential·attacks· | 0005f290:·7465·6e74·6961·6c20·6174·7461·636b·7320··tential·attacks· | ||
| 0005f2a0:·6167·6169·6e73·740a·656e·6372·7970·7469··against.encrypti | 0005f2a0:·6167·6169·6e73·740a·656e·6372·7970·7469··against.encrypti | ||
| 0005f2b0:·6f6e·206b·6579·7320·6172·6520·6c69·6d69··on·keys·are·limi | 0005f2b0:·6f6e·206b·6579·7320·6172·6520·6c69·6d69··on·keys·are·limi | ||
| 0005f2c0:·7465·642e·0a20·203c·2f74·643e·0a20·203c··ted..··</td>.··< | 0005f2c0:·7465·642e·0a20·203c·2f74·643e·0a20·203c··ted..··</td>.··< | ||
| 0005f2d0:·7464·3e76·6172·5f72·656b·6579·5f6c·696d··td>var_rekey_lim | 0005f2d0:·7464·3e76·6172·5f72·656b·6579·5f6c·696d··td>var_rekey_lim | ||
| 0005f2e0:·6974·5f74·696d·653d·3168·6f75·723c·6272··it_time=1hour<br | |||
| 0005f2f0:·2f3e·7661·725f·7265·6b65·795f·6c69·6d69··/>var_rekey_limi | |||
| 0005f | 0005f2e0:·6974·5f73·697a·653d·3147·3c62·722f·3e76··it_size=1G<br/>v | ||
| 0005f2f0:·6172·5f72·656b·6579·5f6c·696d·6974·5f74··ar_rekey_limit_t | |||
| 0005f300:·696d·653d·3168·6f75·723c·2f74·643e·0a3c··ime=1hour</td>.< | |||
| 0005f310:·2f74·723e·0a3c·7472·3e0a·2020·3c74·643e··/tr>.<tr>.··<td> | 0005f310:·2f74·723e·0a3c·7472·3e0a·2020·3c74·643e··/tr>.<tr>.··<td> | ||
| 0005f320:·3c2f·7464·3e0a·2020·3c74·643e·4e2f·413c··</td>.··<td>N/A< | 0005f320:·3c2f·7464·3e0a·2020·3c74·643e·4e2f·413c··</td>.··<td>N/A< | ||
| 0005f330:·2f74·643e·0a20·203c·7464·3e53·5348·2073··/td>.··<td>SSH·s | 0005f330:·2f74·643e·0a20·203c·7464·3e53·5348·2073··/td>.··<td>SSH·s | ||
| 0005f340:·6572·7665·7220·7573·6573·2073·7472·6f6e··erver·uses·stron | 0005f340:·6572·7665·7220·7573·6573·2073·7472·6f6e··erver·uses·stron | ||
| 0005f350:·6720·656e·7472·6f70·7920·746f·2073·6565··g·entropy·to·see | 0005f350:·6720·656e·7472·6f70·7920·746f·2073·6565··g·entropy·to·see | ||
| 0005f360:·643c·2f74·643e·0a20·203c·7464·2078·6d6c··d</td>.··<td·xml | 0005f360:·643c·2f74·643e·0a20·203c·7464·2078·6d6c··d</td>.··<td·xml | ||
| 0005f370:·3a6c·616e·673d·2265·6e2d·5553·223e·0a54··:lang="en-US">.T | 0005f370:·3a6c·616e·673d·2265·6e2d·5553·223e·0a54··:lang="en-US">.T |
| Offset 7762, 16 lines modified | Offset 7762, 16 lines modified | ||
| 7762 | ·································private·key.··········································system·where·the | 7762 | ·································private·key.··········································system·where·the |
| 7763 | ·······················································································associated·public | 7763 | ·······················································································associated·public |
| 7764 | ·······················································································key·has·been | 7764 | ·······················································································key·has·been |
| 7765 | ·······················································································installed. | 7765 | ·······················································································installed. |
| 7766 | ·································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the | 7766 | ·································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the |
| 7767 | ·································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the | 7767 | ·································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the |
| 7768 | ···········Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and | 7768 | ···········Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and |
| 7769 | ········N/·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_ | 7769 | ········N/·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_size=1G |
| 7770 | ········A··renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_ | 7770 | ········A··renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_time=1hour |
| 7771 | ·································following·line·in·/etc/ssh/sshd_config:···············potential·attacks | 7771 | ·································following·line·in·/etc/ssh/sshd_config:···············potential·attacks |
| 7772 | ·································RekeyLimit·1G·1hour···································against·encryption | 7772 | ·································RekeyLimit·1G·1hour···································against·encryption |
| 7773 | ·······················································································keys·are·limited. | 7773 | ·······················································································keys·are·limited. |
| 7774 | ·······················································································SSH·implementation | 7774 | ·······················································································SSH·implementation |
| 7775 | ·······················································································in·Oracle·Linux·8 | 7775 | ·······················································································in·Oracle·Linux·8 |
| 7776 | ·······················································································uses·the·openssl | 7776 | ·······················································································uses·the·openssl |
| 7777 | ·······················································································library,·which | 7777 | ·······················································································library,·which |
| Offset 63, 14908 lines modified | Offset 63, 14908 lines modified | ||
| 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | ||
| 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | ||
| 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | Diff chunk too large, falling back to line-by-line diff (6827 lines added, 6827 lines removed) | |
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·286 | 00000450:·2d32·2861·293c·2f74·643e·0a20·2020·2020··-2(a)</td>.····· | ||
| 00000460:· | 00000460:·203c·7464·3e43·6f6e·6669·6775·7265·2061···<td>Configure·a | ||
| 00000470:·7 | 00000470:·7564·6974·696e·6720·6f66·2075·6e73·7563··uditing·of·unsuc | ||
| 00000480:·636 | 00000480:·6365·7373·6675·6c20·6669·6c65·2061·6363··cessful·file·acc | ||
| 00000490:·6 | 00000490:·6573·7365·733c·2f74·643e·0a20·2020·2020··esses</td>.····· | ||
| 000004a0:· | 000004a0:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | ||
| 000004b0:·6 | 000004b0:·6e2d·5553·223e·0a20·2020·2020·2020·2045··n-US">.········E | ||
| 000004c0:· | 000004c0:·6e73·7572·6520·7468·6174·2075·6e73·7563··nsure·that·unsuc | ||
| 000004d0:·6 | 000004d0:·6365·7373·6675·6c20·6174·7465·6d70·7473··cessful·attempts | ||
| 000004e0:·20 | 000004e0:·2074·6f20·6163·6365·7373·2061·2066·696c···to·access·a·fil | ||
| 000004f0:· | 000004f0:·6520·6172·6520·6175·6469·7465·642e·0a0a··e·are·audited... | ||
| 00000500:· | 00000500:·5468·6520·666f·6c6c·6f77·696e·6720·7275··The·following·ru | ||
| 00000510:·6 | 00000510:·6c65·7320·636f·6e66·6967·7572·6520·6175··les·configure·au | ||
| 00000520:·6 | 00000520:·6469·7420·6173·2064·6573·6372·6962·6564··dit·as·described | ||
| 00000530:·666f·7 | 00000530:·2061·626f·7665·3a0a·3c70·7265·3e23·2320···above:.<pre>##· | ||
| 00000540:· | 00000540:·556e·7375·6363·6573·7366·756c·2066·696c··Unsuccessful·fil | ||
| 00000550:· | 00000550:·6520·6163·6365·7373·2028·616e·7920·6f74··e·access·(any·ot | ||
| 00000560:·6 | 00000560:·6865·7220·6f70·656e·7329·2054·6869·7320··her·opens)·This· | ||
| 00000570:· | 00000570:·6861·7320·746f·2067·6f20·6c61·7374·2e0a··has·to·go·last.. | ||
| 00000580:· | 00000580:·2d61·2061·6c77·6179·732c·6578·6974·202d··-a·always,exit·- | ||
| 00000590:· | 00000590:·4620·6172·6368·3d62·3332·202d·5320·6f70··F·arch=b32·-S·op | ||
| 000005a0:·6 | 000005a0:·656e·2c6f·7065·6e61·742c·6f70·656e·6174··en,openat,openat | ||
| 000005b0:· | 000005b0:·322c·6f70·656e·5f62·795f·6861·6e64·6c65··2,open_by_handle | ||
| 000005c0:· | 000005c0:·5f61·7420·2d46·2065·7869·743d·2d45·4143··_at·-F·exit=-EAC | ||
| 000005d0:· | 000005d0:·4345·5320·2d46·2061·7569·643e·3d31·3030··CES·-F·auid>=100 | ||
| 000005e0:· | 000005e0:·3020·2d46·2061·7569·6421·3d75·6e73·6574··0·-F·auid!=unset | ||
| 000005f0:·20 | 000005f0:·202d·4620·6b65·793d·756e·7375·6363·6573···-F·key=unsucces | ||
| 00000600:·7 | 00000600:·7366·756c·2d61·6363·6573·730a·2d61·2061··sful-access.-a·a | ||
| 00000610:· | 00000610:·6c77·6179·732c·6578·6974·202d·4620·6172··lways,exit·-F·ar | ||
| 00000620:· | 00000620:·6368·3d62·3634·202d·5320·6f70·656e·2c6f··ch=b64·-S·open,o | ||
| 00000630:·7 | 00000630:·7065·6e61·742c·6f70·656e·6174·322c·6f70··penat,openat2,op | ||
| 00000640:· | 00000640:·656e·5f62·795f·6861·6e64·6c65·5f61·7420··en_by_handle_at· | ||
| 00000650:· | 00000650:·2d46·2065·7869·743d·2d45·4143·4345·5320··-F·exit=-EACCES· | ||
| 00000660:·2 | 00000660:·2d46·2061·7569·643e·3d31·3030·3020·2d46··-F·auid>=1000·-F | ||
| 00000670:· | 00000670:·2061·7569·6421·3d75·6e73·6574·202d·4620···auid!=unset·-F· | ||
| 00000680:·6 | 00000680:·6b65·793d·756e·7375·6363·6573·7366·756c··key=unsuccessful | ||
| 00000690:·2 | 00000690:·2d61·6363·6573·730a·2d61·2061·6c77·6179··-access.-a·alway | ||
| 000006a0:·7 | 000006a0:·732c·6578·6974·202d·4620·6172·6368·3d62··s,exit·-F·arch=b | ||
| 000006b0:· | 000006b0:·3332·202d·5320·6f70·656e·2c6f·7065·6e61··32·-S·open,opena | ||
| 000006c0:·74 | 000006c0:·742c·6f70·656e·6174·322c·6f70·656e·5f62··t,openat2,open_b | ||
| 000006d0:· | 000006d0:·795f·6861·6e64·6c65·5f61·7420·2d46·2065··y_handle_at·-F·e | ||
| 000006e0:· | 000006e0:·7869·743d·2d45·5045·524d·202d·4620·6175··xit=-EPERM·-F·au | ||
| 000006f0:· | 000006f0:·6964·3e3d·3130·3030·202d·4620·6175·6964··id>=1000·-F·auid | ||
| 00000700:· | 00000700:·213d·756e·7365·7420·2d46·206b·6579·3d75··!=unset·-F·key=u | ||
| 00000710:· | 00000710:·6e73·7563·6365·7373·6675·6c2d·6163·6365··nsuccessful-acce | ||
| 00000720:· | 00000720:·7373·0a2d·6120·616c·7761·7973·2c65·7869··ss.-a·always,exi | ||
| 00000730:·74 | 00000730:·7420·2d46·2061·7263·683d·6236·3420·2d53··t·-F·arch=b64·-S | ||
| 00000740:· | 00000740:·206f·7065·6e2c·6f70·656e·6174·2c6f·7065···open,openat,ope | ||
| 00000750:· | 00000750:·6e61·7432·2c6f·7065·6e5f·6279·5f68·616e··nat2,open_by_han | ||
| 00000760:· | 00000760:·646c·655f·6174·202d·4620·6578·6974·3d2d··dle_at·-F·exit=- | ||
| 00000770:· | 00000770:·4550·4552·4d20·2d46·2061·7569·643e·3d31··EPERM·-F·auid>=1 | ||
| 00000780:· | 00000780:·3030·3020·2d46·2061·7569·6421·3d75·6e73··000·-F·auid!=uns | ||
| 00000790:·202d· | 00000790:·6574·202d·4620·6b65·793d·756e·7375·6363··et·-F·key=unsucc | ||
| 000007a0:· | 000007a0:·6573·7366·756c·2d61·6363·6573·7320·2020··essful-access··· | ||
| 000007b0:· | 000007b0:·203c·2f70·7265·3e0a·0a4c·6f61·6420·6e65···</pre>..Load·ne | ||
| 000007c0:· | 000007c0:·7720·4175·6469·7420·7275·6c65·7320·696e··w·Audit·rules·in | ||
| 000007d0:· | 000007d0:·746f·206b·6572·6e65·6c20·6279·2072·756e··to·kernel·by·run | ||
| 000007e0:·6 | 000007e0:·6e69·6e67·3a0a·3c70·7265·3e61·7567·656e··ning:.<pre>augen | ||
| 000007f0:· | 000007f0:·7275·6c65·7320·2d2d·6c6f·6164·3c2f·7072··rules·--load</pr | ||
| 00000800:· | 00000800:·653e·0a0a·4e6f·7465·3a20·5468·6973·2072··e>..Note:·This·r | ||
| 00000810:· | 00000810:·756c·6520·7573·6573·2061·2073·7065·6369··ule·uses·a·speci | ||
| 00000820:·6 | 00000820:·616c·2073·6574·206f·6620·4175·6469·7420··al·set·of·Audit· | ||
| 00000830:· | 00000830:·7275·6c65·7320·746f·2063·6f6d·706c·7920··rules·to·comply· | ||
| 00000840:· | 00000840:·7769·7468·204f·5350·5020·342e·322e·312e··with·OSPP·4.2.1. | ||
| 00000850:· | 00000850:·2059·6f75·206d·6179·2072·6575·7365·2074···You·may·reuse·t | ||
| 00000860:· | 00000860:·6869·7320·7275·6c65·2069·6e20·6469·6666··his·rule·in·diff | ||
| 00000870:· | 00000870:·6572·656e·7420·7072·6f66·696c·6573·2e20··erent·profiles.· | ||
| 00000880:· | 00000880:·4966·2079·6f75·2064·6563·6964·6520·746f··If·you·decide·to | ||
| 00000890:· | 00000890:·2064·6f20·736f·2c20·6974·2069·7320·7265···do·so,·it·is·re | ||
| 000008a0:·6 | 000008a0:·636f·6d6d·656e·6465·6420·7468·6174·2079··commended·that·y | ||
| 000008b0:· | 000008b0:·6f75·2069·6e73·7065·6374·2063·6f6e·7465··ou·inspect·conte | ||
| 000008c0:· | 000008c0:·6e74·7320·6f66·2074·6865·2066·696c·6520··nts·of·the·file· | ||
| 000008d0:·6 | 000008d0:·636c·6f73·656c·7920·616e·6420·6d61·6b65··closely·and·make | ||
| 000008e0:· | 000008e0:·2073·7572·6520·7468·6174·2074·6865·7920···sure·that·they· | ||
| 000008f0:· | 000008f0:·6172·6520·616c·6c69·676e·6564·2077·6974··are·alligned·wit | ||
| 00000900:· | 00000900:·6820·796f·7572·206e·6565·6473·2e0a·2020··h·your·needs..·· | ||
| 00000910:· | 00000910:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | ||
| 00000920:· | 00000920:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 00000930:· | 00000930:·2d55·5322·3e0a·2020·2020·2020·2020·556e··-US">.········Un | ||
| 00000940:· | 00000940:·7375·6363·6573·7366·756c·2061·7474·656d··successful·attem | ||
| 00000950:· | 00000950:·7074·7320·746f·2061·6363·6573·7320·6120··pts·to·access·a· | ||
| 00000960:· | 00000960:·6669·6c65·206d·6967·6874·2062·6520·7369··file·might·be·si | ||
| 00000970:·6 | 00000970:·676e·7320·6f66·206d·616c·6963·696f·7573··gns·of·malicious | ||
| 00000980:·206 | 00000980:·2061·6374·6976·6974·7920·6861·7070·656e···activity·happen | ||
| 00000990:·696 | 00000990:·696e·6720·7769·7468·696e·2074·6865·2073··ing·within·the·s | ||
| 000009a0:· | 000009a0:·7973·7465·6d2e·2041·7564·6974·696e·6720··ystem.·Auditing· | ||
| 000009b0:·6 | 000009b0:·6f66·2073·7563·6820·6163·7469·7669·7469··of·such·activiti | ||
| 000009c0:·6 | 000009c0:·6573·2068·656c·7073·2069·6e20·7468·6569··es·helps·in·thei | ||
| 000009d0:· | 000009d0:·7220·6d6f·6e69·746f·7269·6e67·2061·6e64··r·monitoring·and | ||
| 000009e0:· | 000009e0:·2069·6e76·6573·7469·6761·7469·6f6e·2e0a···investigation.. | ||
| 000009f0:· | 000009f0:·2020·2020·2020·3c2f·7464·3e0a·2020·2020········</td>.···· | ||
| 00000a00:· | 00000a00:·3c2f·7472·3e0a·2020·2020·3c74·723e·0a20··</tr>.····<tr>.· | ||
| 00000a10:· | 00000a10:·2020·2020·203c·7464·3e41·552d·3228·6429·······<td>AU-2(d) | ||
| 00000a20:· | 00000a20:·3c62·722f·3e41·552d·3132·2863·293c·6272··<br/>AU-12(c)<br | ||
| 00000a30:·3e4 | 00000a30:·2f3e·434d·2d36·2861·293c·2f74·643e·0a20··/>CM-6(a)</td>.· | ||
| 00000a40:· | 00000a40:·2020·2020·203c·7464·3e52·6563·6f72·6420·······<td>Record· | ||
| 00000a50:· | 00000a50:·556e·7375·6363·6573·7366·756c·2050·6572··Unsuccessful·Per | ||
| 00000a60:· | 00000a60:·6d69·7373·696f·6e20·4368·616e·6765·7320··mission·Changes· | ||
| 00000a70:·7 | 00000a70:·746f·2046·696c·6573·202d·2073·6574·7861··to·Files·-·setxa | ||
| 00000a80:· | 00000a80:·7474·723c·2f74·643e·0a20·2020·2020·203c··ttr</td>.······< | ||
| 00000a90:· | 00000a90:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000aa0:·2020·2020·20 | 00000aa0:·5553·223e·0a20·2020·2020·2020·2054·6865··US">.········The | ||
| 00000ab0:· | 00000ab0:·2061·7564·6974·2073·7973·7465·6d20·7368···audit·system·sh | ||
| 00000ac0:· | 00000ac0:·6f75·6c64·2063·6f6c·6c65·6374·2075·6e73··ould·collect·uns | ||
| 00000ad0:·7 | 00000ad0:·7563·6365·7373·6675·6c20·6669·6c65·2070··uccessful·file·p | ||
| 00000ae0:·6 | 00000ae0:·6572·6d69·7373·696f·6e20·6368·616e·6765··ermission·change | ||
| 00000af0:· | 00000af0:·0a61·7474·656d·7074·7320·666f·7220·616c··.attempts·for·al | ||
| 00000b00:·6 | 00000b00:·6c20·7573·6572·7320·616e·6420·726f·6f74··l·users·and·root | ||
| 00000b10:· | 00000b10:·2e0a·4966·2074·6865·203c·7474·3e61·7564··..If·the·<tt>aud | ||
| 00000b20:·6 | 00000b20:·6974·643c·2f74·743e·2064·6165·6d6f·6e20··itd</tt>·daemon· | ||
| 00000b30:· | 00000b30:·6973·2063·6f6e·6669·6775·7265·640a·746f··is·configured.to | ||
| 00000b40:· | 00000b40:·2075·7365·2074·6865·203c·7474·3e61·7567···use·the·<tt>aug | ||
| 00000b50:· | 00000b50:·656e·7275·6c65·733c·2f74·743e·2070·726f··enrules</tt>·pro | ||
| 00000b60:· | 00000b60:·6772·616d·2074·6f20·7265·6164·2061·7564··gram·to·read·aud | ||
| 00000b70:· | 00000b70:·6974·2072·756c·6573·2064·7572·696e·6720··it·rules·during· | ||
| 00000b80:·6 | 00000b80:·6461·656d·6f6e·0a73·7461·7274·7570·2028··daemon.startup·( | ||
| 00000b90:·7 | 00000b90:·7468·6520·6465·6661·756c·7429·2c20·6164··the·default),·ad | ||
| 00000ba0:· | 00000ba0:·6420·7468·6520·666f·6c6c·6f77·696e·6720··d·the·following· | ||
| 00000bb0:· | 00000bb0:·6c69·6e65·7320·746f·2061·2066·696c·6520··lines·to·a·file· | ||
| Max diff block lines reached; 6401307/7344011 bytes (87.16%) of diff not shown. | |||
| Offset 73, 28 lines modified | Offset 73, 14 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 95 | ······<td·xml:lang="en-US"> | 81 | ······<td·xml:lang="en-US"> |
| 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 98 | GRUB2·command·line·for·the·Linux·operating·system. | 84 | GRUB2·command·line·for·the·Linux·operating·system. |
| 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 105, 14 lines modified | Offset 91, 28 lines modified | ||
| 105 | ······</td> | 91 | ······</td> |
| 106 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 108 | the·vulnerability·to·exploitation. | 94 | the·vulnerability·to·exploitation. |
| 109 | ······</td> | 95 | ······</td> |
| 110 | ····</tr> | 96 | ····</tr> |
| 111 | ····<tr> | 97 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 30 lines modified | Offset 157, 14 lines modified | ||
| 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. | 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. |
| 158 | any·packets·which·are·not·explicitly·permitted·should·not·be | 158 | any·packets·which·are·not·explicitly·permitted·should·not·be |
| 159 | accepted. | 159 | accepted. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | ||
| 165 | ······<td·xml:lang="en-US"> | ||
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | ||
| 168 | ······</td> | ||
| 169 | ······<td·xml:lang="en-US"> | ||
| 170 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | ||
| 171 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 172 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 176 | ······</td> | ||
| 177 | ····</tr> | ||
| 178 | ····<tr> | ||
| 179 | ······<td>Req-1.4.1</td> | ||
| 180 | ······<td>Install·iptables·Package</td> | 164 | ······<td>Install·iptables·Package</td> |
| 181 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| 183 | <pre> | 167 | <pre> |
| 184 | $·sudo·yum·install·iptables</pre> | 168 | $·sudo·yum·install·iptables</pre> |
| 185 | ······</td> | 169 | ······</td> |
| 186 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| Offset 202, 14 lines modified | Offset 186, 30 lines modified | ||
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | 186 | typically·critical·to·operation·of·the·system.·The·loopback·interface |
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 187 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | 188 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 205 | anti-spoofing·measure. | 189 | anti-spoofing·measure. |
| 206 | ······</td> | 190 | ······</td> |
| 207 | ····</tr> | 191 | ····</tr> |
| 208 | ····<tr> | 192 | ····<tr> |
| 193 | ······<td>Req-1.4.1</td> | ||
| 194 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | ||
| 195 | ······<td·xml:lang="en-US"> | ||
| 196 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 197 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | ||
| 198 | ······</td> | ||
| 199 | ······<td·xml:lang="en-US"> | ||
| 200 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | ||
| 201 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 202 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 203 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 204 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 205 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 206 | ······</td> | ||
| 207 | ····</tr> | ||
| 208 | ····<tr> | ||
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 213 | transport·layer·protocol,·designed·to·support·the·idea·of | 213 | transport·layer·protocol,·designed·to·support·the·idea·of |
| 214 | message-oriented·communication,·with·several·streams·of·messages | 214 | message-oriented·communication,·with·several·streams·of·messages |
| 215 | within·one·connection. | 215 | within·one·connection. |
| Offset 274, 14 lines modified | Offset 274, 41 lines modified | ||
| 274 | <br·/> | 274 | <br·/> |
| 275 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast | 275 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast |
| 276 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. | 276 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. |
| 277 | ······</td> | 277 | ······</td> |
| 278 | ····</tr> | 278 | ····</tr> |
| 279 | ····<tr> | 279 | ····<tr> |
| 280 | ······<td>Req-1.4.3</td> | 280 | ······<td>Req-1.4.3</td> |
| Max diff block lines reached; 295662/303394 bytes (97.45%) of diff not shown. | |||
| Offset 34, 14 lines modified | Offset 34, 26 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 41 | ····················································································Routing·protocol | 53 | ····················································································Routing·protocol |
| 42 | ····················································································daemons·are | 54 | ····················································································daemons·are |
| 43 | ····················································································typically·used·on | 55 | ····················································································typically·used·on |
| 44 | ····················································································routers·to·exchange | 56 | ····················································································routers·to·exchange |
| 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 49, 26 lines modified | Offset 61, 14 lines modified | ||
| 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 50 | ·····························sysctl.d:··············································required,·system | 62 | ·····························sysctl.d:··············································required,·system |
| 51 | ·····························net.ipv4.ip_forward·=·0································network·information | 63 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 52 | ····················································································may·be | 64 | ····················································································may·be |
| 53 | ····················································································unnecessarily | 65 | ····················································································unnecessarily |
| 54 | ····················································································transmitted·across | 66 | ····················································································transmitted·across |
| 55 | ····················································································the·network. | 67 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 40 lines modified | Offset 112, 14 lines modified | ||
| 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements | 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements |
| 113 | ·····························DefaultZone=drop·······································proper·design·for·a | 113 | ·····························DefaultZone=drop·······································proper·design·for·a |
| 114 | ····················································································firewall,·i.e.·any | 114 | ····················································································firewall,·i.e.·any |
| 115 | ····················································································packets·which·are | 115 | ····················································································packets·which·are |
| 116 | ····················································································not·explicitly | 116 | ····················································································not·explicitly |
| 117 | ····················································································permitted·should | 117 | ····················································································permitted·should |
| 118 | ····················································································not·be·accepted. | 118 | ····················································································not·be·accepted. |
| 119 | ····················································································A·TCP·SYN·flood | ||
| 120 | ····················································································attack·can·cause·a | ||
| 121 | ····················································································denial·of·service | ||
| 122 | ····················································································by·filling·a | ||
| 123 | ····················································································system's·TCP | ||
| 124 | ····················································································connection·table | ||
| 125 | ····················································································with·connections·in | ||
| 126 | ····················································································the·SYN_RCVD·state. | ||
| 127 | ····················································································Syncookies·can·be | ||
| 128 | ·····························To·set·the·runtime·status·of·the·······················used·to·track·a | ||
| 129 | ·····························net.ipv4.tcp_syncookies·kernel·parameter,·run·the······connection·when·a | ||
| 130 | ·········Enable·Kernel·······following·command:·····································subsequent·ACK·is | ||
| 131 | Req-·····Parameter·to·Use····$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1·············received,·verifying | ||
| 132 | 1.4.1····TCP·Syncookies·on···To·make·sure·that·the·setting·is·persistent,·add·the···the·initiator·is | ||
| 133 | ·········Network·Interfaces··following·line·to·a·file·in·the·directory·/etc/········attempting·a·valid | ||
| 134 | ·····························sysctl.d:··············································connection·and·is | ||
| 135 | ·····························net.ipv4.tcp_syncookies·=·1····························not·a·flood·source. | ||
| 136 | ····················································································This·feature·is | ||
| 137 | ····················································································activated·when·a | ||
| 138 | ····················································································flood·condition·is | ||
| 139 | ····················································································detected,·and | ||
| 140 | ····················································································enables·the·system | ||
| 141 | ····················································································to·continue | ||
| 142 | ····················································································servicing·valid | ||
| 143 | ····················································································connection | ||
| 144 | ····················································································requests. | ||
| 145 | ····················································································iptables·controls | 119 | ····················································································iptables·controls |
| 146 | ····················································································the·Linux·kernel | 120 | ····················································································the·Linux·kernel |
| 147 | ····················································································network·packet | 121 | ····················································································network·packet |
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. |
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | 123 | 1.4.1····Package·············following·command:·····································iptables·allows |
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to |
| 151 | ····················································································set·up·firewalls | 125 | ····················································································set·up·firewalls |
| Offset 164, 14 lines modified | Offset 138, 40 lines modified | ||
| 164 | ····················································································network·traffic | 138 | ····················································································network·traffic |
| 165 | ····················································································should·be·seen,·all | 139 | ····················································································should·be·seen,·all |
| 166 | ····················································································other·interfaces | 140 | ····················································································other·interfaces |
| 167 | ····················································································should·ignore | 141 | ····················································································should·ignore |
| 168 | ····················································································traffic·on·this | 142 | ····················································································traffic·on·this |
| 169 | ····················································································network·as·an·anti- | 143 | ····················································································network·as·an·anti- |
| 170 | ····················································································spoofing·measure. | 144 | ····················································································spoofing·measure. |
| 145 | ····················································································A·TCP·SYN·flood | ||
| 146 | ····················································································attack·can·cause·a | ||
| 147 | ····················································································denial·of·service | ||
| 148 | ····················································································by·filling·a | ||
| 149 | ····················································································system's·TCP | ||
| 150 | ····················································································connection·table | ||
| 151 | ····················································································with·connections·in | ||
| 152 | ····················································································the·SYN_RCVD·state. | ||
| 153 | ····················································································Syncookies·can·be | ||
| 154 | ·····························To·set·the·runtime·status·of·the·······················used·to·track·a | ||
| 155 | ·····························net.ipv4.tcp_syncookies·kernel·parameter,·run·the······connection·when·a | ||
| 156 | ·········Enable·Kernel·······following·command:·····································subsequent·ACK·is | ||
| 157 | Req-·····Parameter·to·Use····$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1·············received,·verifying | ||
| 158 | 1.4.1····TCP·Syncookies·on···To·make·sure·that·the·setting·is·persistent,·add·the···the·initiator·is | ||
| 159 | ·········Network·Interfaces··following·line·to·a·file·in·the·directory·/etc/········attempting·a·valid | ||
| 160 | ·····························sysctl.d:··············································connection·and·is | ||
| 161 | ·····························net.ipv4.tcp_syncookies·=·1····························not·a·flood·source. | ||
| 162 | ····················································································This·feature·is | ||
| 163 | ····················································································activated·when·a | ||
| 164 | ····················································································flood·condition·is | ||
| 165 | ····················································································detected,·and | ||
| 166 | ····················································································enables·the·system | ||
| 167 | ····················································································to·continue | ||
| 168 | ····················································································servicing·valid | ||
| 169 | ····················································································connection | ||
| Max diff block lines reached; 495726/508361 bytes (97.51%) of diff not shown. | |||
| Offset 65, 14863 lines modified | Offset 65, 14863 lines modified | ||
| 00000400:·3c2f·7468·3e0a·2020·2020·3c74·683e·5275··</th>.····<th>Ru | 00000400:·3c2f·7468·3e0a·2020·2020·3c74·683e·5275··</th>.····<th>Ru | ||
| 00000410:·6c65·2054·6974·6c65·3c2f·7468·3e0a·2020··le·Title</th>.·· | 00000410:·6c65·2054·6974·6c65·3c2f·7468·3e0a·2020··le·Title</th>.·· | ||
| 00000420:·2020·3c74·683e·4465·7363·7269·7074·696f····<th>Descriptio | 00000420:·2020·3c74·683e·4465·7363·7269·7074·696f····<th>Descriptio | ||
| 00000430:·6e3c·2f74·683e·0a20·2020·203c·7468·3e52··n</th>.····<th>R | 00000430:·6e3c·2f74·683e·0a20·2020·203c·7468·3e52··n</th>.····<th>R | ||
| 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | ||
| 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | Diff chunk too large, falling back to line-by-line diff (4767 lines added, 4767 lines removed) | |
| 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | ||
| 00000470:·3c74·643e·4155·2d32·286 | 00000470:·3c74·643e·4155·2d32·2861·293c·2f74·643e··<td>AU-2(a)</td> | ||
| 00000480:· | 00000480:·0a20·2020·2020·203c·7464·3e43·6f6e·6669··.······<td>Confi | ||
| 00000490:· | 00000490:·6775·7265·2061·7564·6974·696e·6720·6f66··gure·auditing·of | ||
| 000004a0:· | 000004a0:·2075·6e73·7563·6365·7373·6675·6c20·6669···unsuccessful·fi | ||
| 000004b0:·6 | 000004b0:·6c65·2061·6363·6573·7365·733c·2f74·643e··le·accesses</td> | ||
| 000004c0:· | 000004c0:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 000004d0:·6 | 000004d0:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 000004e0:·2 | 000004e0:·2020·2020·2045·6e73·7572·6520·7468·6174·······Ensure·that | ||
| 000004f0:· | 000004f0:·2075·6e73·7563·6365·7373·6675·6c20·6174···unsuccessful·at | ||
| 00000500:· | 00000500:·7465·6d70·7473·2074·6f20·6163·6365·7373··tempts·to·access | ||
| 00000510:· | 00000510:·2061·2066·696c·6520·6172·6520·6175·6469···a·file·are·audi | ||
| 00000520:· | 00000520:·7465·642e·0a0a·5468·6520·666f·6c6c·6f77··ted...The·follow | ||
| 00000530:· | 00000530:·696e·6720·7275·6c65·7320·636f·6e66·6967··ing·rules·config | ||
| 00000540:·7 | 00000540:·7572·6520·6175·6469·7420·6173·2064·6573··ure·audit·as·des | ||
| 00000550:·6 | 00000550:·6372·6962·6564·2061·626f·7665·3a0a·3c70··cribed·above:.<p | ||
| 00000560:·65 | 00000560:·7265·3e23·2320·556e·7375·6363·6573·7366··re>##·Unsuccessf | ||
| 00000570:· | 00000570:·756c·2066·696c·6520·6163·6365·7373·2028··ul·file·access·( | ||
| 00000580:· | 00000580:·616e·7920·6f74·6865·7220·6f70·656e·7329··any·other·opens) | ||
| 00000590:· | 00000590:·2054·6869·7320·6861·7320·746f·2067·6f20···This·has·to·go· | ||
| 000005a0:· | 000005a0:·6c61·7374·2e0a·2d61·2061·6c77·6179·732c··last..-a·always, | ||
| 000005b0:·6 | 000005b0:·6578·6974·202d·4620·6172·6368·3d62·3332··exit·-F·arch=b32 | ||
| 000005c0:·20 | 000005c0:·202d·5320·6f70·656e·2c6f·7065·6e61·742c···-S·open,openat, | ||
| 000005d0:· | 000005d0:·6f70·656e·6174·322c·6f70·656e·5f62·795f··openat2,open_by_ | ||
| 000005e0:·6 | 000005e0:·6861·6e64·6c65·5f61·7420·2d46·2065·7869··handle_at·-F·exi | ||
| 000005f0:· | 000005f0:·743d·2d45·4143·4345·5320·2d46·2061·7569··t=-EACCES·-F·aui | ||
| 00000600:·6 | 00000600:·643e·3d31·3030·3020·2d46·2061·7569·6421··d>=1000·-F·auid! | ||
| 00000610:· | 00000610:·3d75·6e73·6574·202d·4620·6b65·793d·756e··=unset·-F·key=un | ||
| 00000620:· | 00000620:·7375·6363·6573·7366·756c·2d61·6363·6573··successful-acces | ||
| 00000630:· | 00000630:·730a·2d61·2061·6c77·6179·732c·6578·6974··s.-a·always,exit | ||
| 00000640:· | 00000640:·202d·4620·6172·6368·3d62·3634·202d·5320···-F·arch=b64·-S· | ||
| 00000650:·6 | 00000650:·6f70·656e·2c6f·7065·6e61·742c·6f70·656e··open,openat,open | ||
| 00000660:· | 00000660:·6174·322c·6f70·656e·5f62·795f·6861·6e64··at2,open_by_hand | ||
| 00000670:· | 00000670:·6c65·5f61·7420·2d46·2065·7869·743d·2d45··le_at·-F·exit=-E | ||
| 00000680:· | 00000680:·4143·4345·5320·2d46·2061·7569·643e·3d31··ACCES·-F·auid>=1 | ||
| 00000690:· | 00000690:·3030·3020·2d46·2061·7569·6421·3d75·6e73··000·-F·auid!=uns | ||
| 000006a0:· | 000006a0:·6574·202d·4620·6b65·793d·756e·7375·6363··et·-F·key=unsucc | ||
| 000006b0:· | 000006b0:·6573·7366·756c·2d61·6363·6573·730a·2d61··essful-access.-a | ||
| 000006c0:· | 000006c0:·2061·6c77·6179·732c·6578·6974·202d·4620···always,exit·-F· | ||
| 000006d0:·672 | 000006d0:·6172·6368·3d62·3332·202d·5320·6f70·656e··arch=b32·-S·open | ||
| 000006e0:·2c | 000006e0:·2c6f·7065·6e61·742c·6f70·656e·6174·322c··,openat,openat2, | ||
| 000006f0:·6 | 000006f0:·6f70·656e·5f62·795f·6861·6e64·6c65·5f61··open_by_handle_a | ||
| 00000700:· | 00000700:·7420·2d46·2065·7869·743d·2d45·5045·524d··t·-F·exit=-EPERM | ||
| 00000710:· | 00000710:·202d·4620·6175·6964·3e3d·3130·3030·202d···-F·auid>=1000·- | ||
| 00000720:· | 00000720:·4620·6175·6964·213d·756e·7365·7420·2d46··F·auid!=unset·-F | ||
| 00000730:· | 00000730:·206b·6579·3d75·6e73·7563·6365·7373·6675···key=unsuccessfu | ||
| 00000740:· | 00000740:·6c2d·6163·6365·7373·0a2d·6120·616c·7761··l-access.-a·alwa | ||
| 00000750:· | 00000750:·7973·2c65·7869·7420·2d46·2061·7263·683d··ys,exit·-F·arch= | ||
| 00000760:· | 00000760:·6236·3420·2d53·206f·7065·6e2c·6f70·656e··b64·-S·open,open | ||
| 00000770:· | 00000770:·6174·2c6f·7065·6e61·7432·2c6f·7065·6e5f··at,openat2,open_ | ||
| 00000780:·6 | 00000780:·6279·5f68·616e·646c·655f·6174·202d·4620··by_handle_at·-F· | ||
| 00000790:· | 00000790:·6578·6974·3d2d·4550·4552·4d20·2d46·2061··exit=-EPERM·-F·a | ||
| 000007a0:· | 000007a0:·7569·643e·3d31·3030·3020·2d46·2061·7569··uid>=1000·-F·aui | ||
| 000007b0:·6 | 000007b0:·6421·3d75·6e73·6574·202d·4620·6b65·793d··d!=unset·-F·key= | ||
| 000007c0:·7 | 000007c0:·756e·7375·6363·6573·7366·756c·2d61·6363··unsuccessful-acc | ||
| 000007d0:· | 000007d0:·6573·7320·2020·203c·2f70·7265·3e0a·0a4c··ess····</pre>..L | ||
| 000007e0:· | 000007e0:·6f61·6420·6e65·7720·4175·6469·7420·7275··oad·new·Audit·ru | ||
| 000007f0:· | 000007f0:·6c65·7320·696e·746f·206b·6572·6e65·6c20··les·into·kernel· | ||
| 00000800:· | 00000800:·6279·2072·756e·6e69·6e67·3a0a·3c70·7265··by·running:.<pre | ||
| 00000810:· | 00000810:·3e61·7567·656e·7275·6c65·7320·2d2d·6c6f··>augenrules·--lo | ||
| 00000820:·6 | 00000820:·6164·3c2f·7072·653e·0a0a·4e6f·7465·3a20··ad</pre>..Note:· | ||
| 00000830:· | 00000830:·5468·6973·2072·756c·6520·7573·6573·2061··This·rule·uses·a | ||
| 00000840:· | 00000840:·2073·7065·6369·616c·2073·6574·206f·6620···special·set·of· | ||
| 00000850:· | 00000850:·4175·6469·7420·7275·6c65·7320·746f·2063··Audit·rules·to·c | ||
| 00000860:· | 00000860:·6f6d·706c·7920·7769·7468·204f·5350·5020··omply·with·OSPP· | ||
| 00000870:·2 | 00000870:·342e·322e·312e·2059·6f75·206d·6179·2072··4.2.1.·You·may·r | ||
| 00000880:·657 | 00000880:·6575·7365·2074·6869·7320·7275·6c65·2069··euse·this·rule·i | ||
| 00000890:·6 | 00000890:·6e20·6469·6666·6572·656e·7420·7072·6f66··n·different·prof | ||
| 000008a0:·696 | 000008a0:·696c·6573·2e20·4966·2079·6f75·2064·6563··iles.·If·you·dec | ||
| 000008b0:· | 000008b0:·6964·6520·746f·2064·6f20·736f·2c20·6974··ide·to·do·so,·it | ||
| 000008c0:· | 000008c0:·2069·7320·7265·636f·6d6d·656e·6465·6420···is·recommended· | ||
| 000008d0:·7 | 000008d0:·7468·6174·2079·6f75·2069·6e73·7065·6374··that·you·inspect | ||
| 000008e0:· | 000008e0:·2063·6f6e·7465·6e74·7320·6f66·2074·6865···contents·of·the | ||
| 000008f0:·20 | 000008f0:·2066·696c·6520·636c·6f73·656c·7920·616e···file·closely·an | ||
| 00000900:· | 00000900:·6420·6d61·6b65·2073·7572·6520·7468·6174··d·make·sure·that | ||
| 00000910:·20 | 00000910:·2074·6865·7920·6172·6520·616c·6c69·676e···they·are·allign | ||
| 00000920:·6 | 00000920:·6564·2077·6974·6820·796f·7572·206e·6565··ed·with·your·nee | ||
| 00000930:· | 00000930:·6473·2e0a·2020·2020·2020·3c2f·7464·3e0a··ds..······</td>. | ||
| 00000940:· | 00000940:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 00000950:· | 00000950:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 00000960:· | 00000960:·2020·2020·556e·7375·6363·6573·7366·756c······Unsuccessful | ||
| 00000970:·20 | 00000970:·2061·7474·656d·7074·7320·746f·2061·6363···attempts·to·acc | ||
| 00000980:· | 00000980:·6573·7320·6120·6669·6c65·206d·6967·6874··ess·a·file·might | ||
| 00000990:· | 00000990:·2062·6520·7369·676e·7320·6f66·206d·616c···be·signs·of·mal | ||
| 000009a0:· | 000009a0:·6963·696f·7573·2061·6374·6976·6974·7920··icious·activity· | ||
| 000009b0:·6 | 000009b0:·6861·7070·656e·696e·6720·7769·7468·696e··happening·within | ||
| 000009c0:· | 000009c0:·2074·6865·2073·7973·7465·6d2e·2041·7564···the·system.·Aud | ||
| 000009d0:· | 000009d0:·6974·696e·6720·6f66·2073·7563·6820·6163··iting·of·such·ac | ||
| 000009e0:· | 000009e0:·7469·7669·7469·6573·2068·656c·7073·2069··tivities·helps·i | ||
| 000009f0:·7 | 000009f0:·6e20·7468·6569·7220·6d6f·6e69·746f·7269··n·their·monitori | ||
| 00000a00:·6 | 00000a00:·6e67·2061·6e64·2069·6e76·6573·7469·6761··ng·and·investiga | ||
| 00000a10:· | 00000a10:·7469·6f6e·2e0a·2020·2020·2020·3c2f·7464··tion..······</td | ||
| 00000a20:· | 00000a20:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | ||
| 00000a30:· | 00000a30:·3c74·723e·0a20·2020·2020·203c·7464·3e41··<tr>.······<td>A | ||
| 00000a40:· | 00000a40:·552d·3228·6429·3c62·722f·3e41·552d·3132··U-2(d)<br/>AU-12 | ||
| 00000a50:·2 | 00000a50:·2863·293c·6272·2f3e·434d·2d36·2861·293c··(c)<br/>CM-6(a)< | ||
| 00000a60:· | 00000a60:·2f74·643e·0a20·2020·2020·203c·7464·3e52··/td>.······<td>R | ||
| 00000a70:· | 00000a70:·6563·6f72·6420·556e·7375·6363·6573·7366··ecord·Unsuccessf | ||
| 00000a80:· | 00000a80:·756c·2050·6572·6d69·7373·696f·6e20·4368··ul·Permission·Ch | ||
| 00000a90:· | 00000a90:·616e·6765·7320·746f·2046·696c·6573·202d··anges·to·Files·- | ||
| 00000aa0:· | 00000aa0:·2073·6574·7861·7474·723c·2f74·643e·0a20···setxattr</td>.· | ||
| 00000ab0:·20 | 00000ab0:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | ||
| 00000ac0:·2 | 00000ac0:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | ||
| 00000ad0:· | 00000ad0:·2020·2054·6865·2061·7564·6974·2073·7973·····The·audit·sys | ||
| 00000ae0:· | 00000ae0:·7465·6d20·7368·6f75·6c64·2063·6f6c·6c65··tem·should·colle | ||
| 00000af0:·6 | 00000af0:·6374·2075·6e73·7563·6365·7373·6675·6c20··ct·unsuccessful· | ||
| 00000b00:· | 00000b00:·6669·6c65·2070·6572·6d69·7373·696f·6e20··file·permission· | ||
| 00000b10:· | 00000b10:·6368·616e·6765·0a61·7474·656d·7074·7320··change.attempts· | ||
| 00000b20:· | 00000b20:·666f·7220·616c·6c20·7573·6572·7320·616e··for·all·users·an | ||
| 00000b30:·6 | 00000b30:·6420·726f·6f74·2e0a·4966·2074·6865·203c··d·root..If·the·< | ||
| 00000b40:· | 00000b40:·7474·3e61·7564·6974·643c·2f74·743e·2064··tt>auditd</tt>·d | ||
| 00000b50:· | 00000b50:·6165·6d6f·6e20·6973·2063·6f6e·6669·6775··aemon·is·configu | ||
| 00000b60:· | 00000b60:·7265·640a·746f·2075·7365·2074·6865·203c··red.to·use·the·< | ||
| 00000b70:· | 00000b70:·7474·3e61·7567·656e·7275·6c65·733c·2f74··tt>augenrules</t | ||
| 00000b80:· | 00000b80:·743e·2070·726f·6772·616d·2074·6f20·7265··t>·program·to·re | ||
| 00000b90:·6 | 00000b90:·6164·2061·7564·6974·2072·756c·6573·2064··ad·audit·rules·d | ||
| 00000ba0:· | 00000ba0:·7572·696e·6720·6461·656d·6f6e·0a73·7461··uring·daemon.sta | ||
| 00000bb0:·7 | 00000bb0:·7274·7570·2028·7468·6520·6465·6661·756c··rtup·(the·defaul | ||
| 00000bc0:· | 00000bc0:·7429·2c20·6164·6420·7468·6520·666f·6c6c··t),·add·the·foll | ||
| 00000bd0:·6 | 00000bd0:·6f77·696e·6720·6c69·6e65·7320·746f·2061··owing·lines·to·a | ||
| Max diff block lines reached; 7107940/7766364 bytes (91.52%) of diff not shown. | |||
| Offset 123, 215 lines modified | Offset 123, 215 lines modified | ||
| 000007a0:·6e74·656e·7469·6f6e·616c·6c79·2065·7865··ntentionally·exe | 000007a0:·6e74·656e·7469·6f6e·616c·6c79·2065·7865··ntentionally·exe | ||
| 000007b0:·6375·7465·2063·6f64·6520·696e·206c·6573··cute·code·in·les | 000007b0:·6375·7465·2063·6f64·6520·696e·206c·6573··cute·code·in·les | ||
| 000007c0:·7320·7072·6976·696c·6567·6564·206d·656d··s·privileged·mem | 000007c0:·7320·7072·6976·696c·6567·6564·206d·656d··s·privileged·mem | ||
| 000007d0:·6f72·7920·7370·6163·652e·0a20·2020·2020··ory·space..····· | 000007d0:·6f72·7920·7370·6163·652e·0a20·2020·2020··ory·space..····· | ||
| 000007e0:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | 000007e0:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | ||
| 000007f0:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | 000007f0:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | ||
| 00000800:·3c74·643e·5231·3c2f·7464·3e0a·2020·2020··<td>R1</td>.···· | 00000800:·3c74·643e·5231·3c2f·7464·3e0a·2020·2020··<td>R1</td>.···· | ||
| 00000810:·2020·3c74·643e·5072·6566·6572·2074·6f20····<td>Prefer·to· | |||
| 00000820:·7573·6520·6120·3634·2d62·6974·204f·7065··use·a·64-bit·Ope | |||
| 00000830:·7261·7469·6e67·2053·7973·7465·6d20·7768··rating·System·wh | |||
| 00000840:·656e·2073·7570·706f·7274·6564·3c2f·7464··en·supported</td | |||
| 00000810:·2020·3c74·643e·496e·7374·616c·6c20·7468····<td>Install·th | |||
| 00000820:·6520·6472·6163·7574·2d66·6970·732d·6165··e·dracut-fips-ae | |||
| 00000830:·736e·6920·5061·636b·6167·653c·2f74·643e··sni·Package</td> | |||
| 00000840:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | |||
| 00000850:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | |||
| 00000860:·2020·2020·2054·6f20·656e·6162·6c65·2046·······To·enable·F | |||
| 00000870:·4950·5320·6f6e·2073·7973·7465·6d20·7468··IPS·on·system·th | |||
| 00000880:·6174·2073·7570·706f·7274·2074·6865·2041··at·support·the·A | |||
| 00000890:·6476·616e·6365·6420·456e·6372·7970·7469··dvanced·Encrypti | |||
| 000008a0:·6f6e·2053·7461·6e64·6172·6420·2841·4553··on·Standard·(AES | |||
| 000008b0:·2920·6f72·204e·6577·0a49·6e73·7472·7563··)·or·New.Instruc | |||
| 000008c0:·7469·6f6e·7320·2841·4553·2d4e·4929·2065··tions·(AES-NI)·e | |||
| 000008d0:·6e67·696e·652c·2074·6865·2073·7973·7465··ngine,·the·syste | |||
| 000008e0:·6d20·7265·7175·6972·6573·2074·6861·7420··m·requires·that· | |||
| 000008f0:·7468·6520·3c74·743e·6472·6163·7574·2d66··the·<tt>dracut-f | |||
| 00000900:·6970·732d·6165·736e·693c·2f74·743e·0a70··ips-aesni</tt>.p | |||
| 00000910:·6163·6b61·6765·2062·6520·696e·7374·616c··ackage·be·instal | |||
| 00000920:·6c65·642e·0a54·6865·203c·636f·6465·3e64··led..The·<code>d | |||
| 00000930:·7261·6375·742d·6669·7073·2d61·6573·6e69··racut-fips-aesni | |||
| 00000940:·3c2f·636f·6465·3e20·7061·636b·6167·6520··</code>·package· | |||
| 00000950:·6361·6e20·6265·2069·6e73·7461·6c6c·6564··can·be·installed | |||
| 00000960:·2077·6974·6820·7468·6520·666f·6c6c·6f77···with·the·follow | |||
| 00000970:·696e·6720·636f·6d6d·616e·643a·0a3c·7072··ing·command:.<pr | |||
| 00000980:·653e·0a24·2073·7564·6f20·7975·6d20·696e··e>.$·sudo·yum·in | |||
| 00000990:·7374·616c·6c20·6472·6163·7574·2d66·6970··stall·dracut-fip | |||
| 000009a0:·732d·6165·736e·693c·2f70·7265·3e0a·2020··s-aesni</pre>.·· | |||
| 000009b0:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 000009c0:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 000009d0:·2d55·5322·3e0a·2020·2020·2020·2020·5573··-US">.········Us | |||
| 000009e0:·6520·6f66·2077·6561·6b20·6f72·2075·6e74··e·of·weak·or·unt | |||
| 000009f0:·6573·7465·6420·656e·6372·7970·7469·6f6e··ested·encryption | |||
| 00000a00:·2061·6c67·6f72·6974·686d·7320·756e·6465···algorithms·unde | |||
| 00000a10:·726d·696e·6573·2074·6865·2070·7572·706f··rmines·the·purpo | |||
| 00000a20:·7365·7320·6f66·2075·7469·6c69·7a69·6e67··ses·of·utilizing | |||
| 00000a30:·2065·6e63·7279·7074·696f·6e20·746f·0a70···encryption·to.p | |||
| 00000a40:·726f·7465·6374·2064·6174·612e·2054·6865··rotect·data.·The | |||
| 00000a50:·206f·7065·7261·7469·6e67·2073·7973·7465···operating·syste | |||
| 00000a60:·6d20·6d75·7374·2069·6d70·6c65·6d65·6e74··m·must·implement | |||
| 00000a70:·2063·7279·7074·6f67·7261·7068·6963·206d···cryptographic·m | |||
| 00000a80:·6f64·756c·6573·2061·6468·6572·696e·6720··odules·adhering· | |||
| 00000a90:·746f·2074·6865·2068·6967·6865·720a·7374··to·the·higher.st | |||
| 00000aa0:·616e·6461·7264·7320·6170·7072·6f76·6564··andards·approved | |||
| 00000ab0:·2062·7920·7468·6520·6665·6465·7261·6c20···by·the·federal· | |||
| 00000ac0:·676f·7665·726e·6d65·6e74·2073·696e·6365··government·since | |||
| 00000ad0:·2074·6869·7320·7072·6f76·6964·6573·2061···this·provides·a | |||
| 00000ae0:·7373·7572·616e·6365·2074·6865·7920·6861··ssurance·they·ha | |||
| 00000af0:·7665·2062·6565·6e20·7465·7374·6564·0a61··ve·been·tested.a | |||
| 00000b00:·6e64·2076·616c·6964·6174·6564·2e0a·2020··nd·validated..·· | |||
| 00000b10:·2020·2020·3c2f·7464·3e0a·2020·2020·3c2f······</td>.····</ | |||
| 00000b20:·7472·3e0a·2020·2020·3c74·723e·0a20·2020··tr>.····<tr>.··· | |||
| 00000b30:·2020·203c·7464·3e52·313c·2f74·643e·0a20·····<td>R1</td>.· | |||
| 00000b40:·2020·2020·203c·7464·3e45·6e73·7572·6520·······<td>Ensure· | |||
| 00000b50:·534d·4150·2069·7320·6e6f·7420·6469·7361··SMAP·is·not·disa | |||
| 00000b60:·626c·6564·2064·7572·696e·6720·626f·6f74··bled·during·boot | |||
| 00000b70:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | |||
| 00000b80:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | |||
| 00000b90:·3e0a·2020·2020·2020·2020·5468·6520·534d··>.········The·SM | |||
| 00000ba0:·4150·2069·7320·7573·6564·2074·6f20·7072··AP·is·used·to·pr | |||
| 00000bb0:·6576·656e·7420·7468·6520·7375·7065·7276··event·the·superv | |||
| 00000bc0:·6973·6f72·206d·6f64·6520·6672·6f6d·2075··isor·mode·from·u | |||
| 00000bd0:·6e69·6e74·656e·7469·6f6e·616c·6c79·2072··nintentionally·r | |||
| 00000be0:·6561·6469·6e67·2f77·7269·7469·6e67·2069··eading/writing·i | |||
| 00000bf0:·6e74·6f0a·6d65·6d6f·7279·2070·6167·6573··nto.memory·pages | |||
| 00000c00:·2069·6e20·7468·6520·7573·6572·2073·7061···in·the·user·spa | |||
| 00000c10:·6365·2c20·6974·2069·7320·656e·6162·6c65··ce,·it·is·enable | |||
| 00000c20:·6420·6279·2064·6566·6175·6c74·2073·696e··d·by·default·sin | |||
| 00000c30:·6365·204c·696e·7578·206b·6572·6e65·6c20··ce·Linux·kernel· | |||
| 00000c40:·332e·372e·0a42·7574·2069·7420·636f·756c··3.7..But·it·coul | |||
| 00000c50:·6420·6265·2064·6973·6162·6c65·6420·7468··d·be·disabled·th | |||
| 00000c60:·726f·7567·6820·6b65·726e·656c·2062·6f6f··rough·kernel·boo | |||
| 00000c70:·7420·7061·7261·6d65·7465·7273·2e0a·0a45··t·parameters...E | |||
| 00000c80:·6e73·7572·6520·7468·6174·2053·7570·6572··nsure·that·Super | |||
| 00000c90:·7669·736f·7220·4d6f·6465·2041·6363·6573··visor·Mode·Acces | |||
| 00000ca0:·7320·5072·6576·656e·7469·6f6e·2028·534d··s·Prevention·(SM | |||
| 00000cb0:·4150·2920·6973·206e·6f74·2064·6973·6162··AP)·is·not·disab | |||
| 00000cc0:·6c65·6420·6279·0a74·6865·203c·7474·3e6e··led·by.the·<tt>n | |||
| 00000cd0:·6f73·6d61·703c·2f74·743e·2062·6f6f·7420··osmap</tt>·boot· | |||
| 00000ce0:·7061·7261·6d65·6e74·6572·206f·7074·696f··paramenter·optio | |||
| 00000cf0:·6e2e·0a0a·4368·6563·6b20·7468·6174·2074··n...Check·that·t | |||
| 00000d00:·6865·206c·696e·6520·3c70·7265·3e47·5255··he·line·<pre>GRU | |||
| 00000d10:·425f·434d·444c·494e·455f·4c49·4e55·583d··B_CMDLINE_LINUX= | |||
| 00000d20:·222e·2e2e·223c·2f70·7265·3e20·7769·7468··"..."</pre>·with | |||
| 00000d30:·696e·203c·7474·3e2f·6574·632f·6465·6661··in·<tt>/etc/defa | |||
| 00000d40:·756c·742f·6772·7562·3c2f·7474·3e0a·646f··ult/grub</tt>.do | |||
| 00000d50:·6573·6e27·7420·636f·6e74·6169·6e20·7468··esn't·contain·th | |||
| 00000d60:·6520·6172·6775·6d65·6e74·203c·7474·3e6e··e·argument·<tt>n | |||
| 00000d70:·6f73·6d61·703c·2f74·743e·2e0a·5275·6e20··osmap</tt>..Run· | |||
| 00000d80:·7468·6520·666f·6c6c·6f77·696e·6720·636f··the·following·co | |||
| 00000d90:·6d6d·616e·6420·746f·2075·7064·6174·6520··mmand·to·update· | |||
| 00000da0:·636f·6d6d·616e·6420·6c69·6e65·2066·6f72··command·line·for | |||
| 00000db0:·2061·6c72·6561·6479·2069·6e73·7461·6c6c···already·install | |||
| 00000dc0:·6564·206b·6572·6e65·6c73·3a0a·3c70·7265··ed·kernels:.<pre | |||
| 00000dd0:·3e23·2067·7275·6262·7920·2d2d·7570·6461··>#·grubby·--upda | |||
| 00000de0:·7465·2d6b·6572·6e65·6c3d·414c·4c20·2d2d··te-kernel=ALL·-- | |||
| 00000df0:·7265·6d6f·7665·2d61·7267·733d·226e·6f73··remove-args="nos | |||
| 00000e00:·6d61·7022·3c2f·7072·653e·0a20·2020·2020··map"</pre>.····· | |||
| 00000e10:·203c·2f74·643e·0a20·2020·2020·203c·7464···</td>.······<td | |||
| 00000e20:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | |||
| 00000e30:·223e·0a20·2020·2020·2020·2044·6973·6162··">.········Disab | |||
| 00000e40:·6c69·6e67·2053·4d41·5020·6361·6e20·6661··ling·SMAP·can·fa | |||
| 00000e50:·6369·6c69·7461·7465·2065·7870·6c6f·6974··cilitate·exploit | |||
| 00000e60:·6174·696f·6e20·6f66·2076·756c·6e65·7261··ation·of·vulnera | |||
| 00000e70:·6269·6c69·7469·6573·2063·6175·7365·6420··bilities·caused· | |||
| 00000e80:·6279·2075·6e69·6e74·656e·6465·6420·6163··by·unintended·ac | |||
| 00000e90:·6365·7373·2061·6e64·0a6d·616e·6970·756c··cess·and.manipul | |||
| 00000ea0:·6174·696f·6e20·6f66·2064·6174·6120·696e··ation·of·data·in | |||
| 00000eb0:·2074·6865·2075·7365·7220·7370·6163·652e···the·user·space. | |||
| 00000ec0:·0a20·2020·2020·203c·2f74·643e·0a20·2020··.······</td>.··· | |||
| 00000ed0:·203c·2f74·723e·0a20·2020·203c·7472·3e0a···</tr>.····<tr>. | |||
| 00000ee0:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | |||
| 00000ef0:·3e0a·2020·2020·2020·3c74·643e·5072·6566··>.······<td>Pref | |||
| 00000f00:·6572·2074·6f20·7573·6520·6120·3634·2d62··er·to·use·a·64-b | |||
| 00000f10:·6974·204f·7065·7261·7469·6e67·2053·7973··it·Operating·Sys | |||
| 00000f20:·7465·6d20·7768·656e·2073·7570·706f·7274··tem·when·support | |||
| 00000f30:·6564·3c2f·7464·3e0a·2020·2020·2020·3c74··ed</td>.······<t | |||
| 00000f40:·6420·786d·6c3a·6c61·6e67·3d22·656e·2d55··d·xml:lang="en-U | |||
| Max diff block lines reached; 3002618/3030932 bytes (99.07%) of diff not shown. | |||
| Offset 15, 39 lines modified | Offset 15, 14 lines modified | ||
| 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 17 | ······························argument·nosmep.·Run·the·following·command | 17 | ······························argument·nosmep.·Run·the·following·command |
| 18 | ······························to·update·command·line·for·already·installed | 18 | ······························to·update·command·line·for·already·installed |
| 19 | ······························kernels: | 19 | ······························kernels: |
| 20 | ······························#·grubby·--update-kernel=ALL·--remove- | 20 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 21 | ······························args="nosmep" | 21 | ······························args="nosmep" |
| 22 | ···········································································Use·of·weak·or·untested·encryption | ||
| 23 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 24 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 25 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 26 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 27 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 28 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 29 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 30 | ···········································································validated. | ||
| 31 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 32 | ······························mode·from·unintentionally·reading/writing | ||
| 33 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 34 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 35 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 36 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 37 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 38 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 39 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 40 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 41 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 42 | ······························argument·nosmap.·Run·the·following·command | ||
| 43 | ······························to·update·command·line·for·already·installed | ||
| 44 | ······························kernels: | ||
| 45 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 46 | ······························args="nosmap" | ||
| 47 | ···········································································Use·of·a·64-bit·operating·system | 22 | ···········································································Use·of·a·64-bit·operating·system |
| 48 | ···········································································offers·a·few·advantages,·like·a·larger | 23 | ···········································································offers·a·few·advantages,·like·a·larger |
| 49 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | 24 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space |
| 50 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | 25 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and |
| 51 | ····supported······························································systematic·presence·of·No·eXecute·and | 26 | ····supported······························································systematic·presence·of·No·eXecute·and |
| 52 | ···········································································Execute·Disable·(NX/XD)·protection | 27 | ···········································································Execute·Disable·(NX/XD)·protection |
| 53 | ···········································································bits. | 28 | ···········································································bits. |
| Offset 62, 14 lines modified | Offset 37, 39 lines modified | ||
| 62 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 37 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 63 | ······························installed·with·the·following·command:········(NX)·support. | 38 | ······························installed·with·the·following·command:········(NX)·support. |
| 64 | ······························$·sudo·yum·install·kernel-PAE | 39 | ······························$·sudo·yum·install·kernel-PAE |
| 65 | ······························The·installation·process·should·also·have | 40 | ······························The·installation·process·should·also·have |
| 66 | ······························configured·the·bootloader·to·load·the·new | 41 | ······························configured·the·bootloader·to·load·the·new |
| 67 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 42 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 68 | ······························modify·/etc/default/grub·if·necessary. | 43 | ······························modify·/etc/default/grub·if·necessary. |
| 44 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 45 | ······························mode·from·unintentionally·reading/writing | ||
| 46 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 47 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 48 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 49 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 50 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 51 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 52 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 53 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 54 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 55 | ······························argument·nosmap.·Run·the·following·command | ||
| 56 | ······························to·update·command·line·for·already·installed | ||
| 57 | ······························kernels: | ||
| 58 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 59 | ······························args="nosmap" | ||
| 60 | ···········································································Use·of·weak·or·untested·encryption | ||
| 61 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 68 | ···········································································validated. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 45 lines modified | Offset 99, 59 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·poisoning·of·SLUB/SLAB·objects, | ||
| 107 | ······························add·the·argument·slub_debug=P·to·the·default | ||
| 108 | ······························GRUB·2·command·line·for·the·Linux·operating··Poisoning·writes·an·arbitrary·value·to | ||
| 109 | ······························system.·To·ensure·that·slub_debug=P·is·added·freed·objects,·so·any·modification·or | ||
| 106 | ······························Certain·CPUs·are·vulnerable·to·an·exploit | ||
| 107 | ······························against·a·common·wide·industry·wide | ||
| 108 | ······························performance·optimization·known·as | ||
| 109 | ······························Speculative·Store·Bypass·(SSB).·In·such | ||
| 110 | ······························cases,·recent·stores·to·the·same·memory | ||
| 111 | ······························location·cannot·always·be·observed·by·later | ||
| 112 | ······························loads·during·speculative·execution.·However, | ||
| 113 | ······························such·stores·are·unlikely·and·thus·they·can | ||
| 114 | ······························be·detected·prior·to·instruction·retirement | ||
| 115 | ······························at·the·end·of·a·particular·speculation | ||
| 116 | ······························execution·window.·Since·Linux·Kernel·4.17 | ||
| 117 | ······························you·can·check·the·SSB·mitigation·state·with | ||
| 118 | ······························the·following·command:·cat·/sys/devices/·····In·vulnerable·processsors,·the | ||
| 119 | ······························system/cpu/vulnerabilities/spec_store_bypass·speculatively·forwarded·store·can·be | ||
| 120 | ····Configure·Speculative·····Select·the·appropriate·SSB·state·by·adding···used·in·a·cache·side·channel·attack. | ||
| 121 | R8··Store·Bypass·Mitigation···the·argument·spec_store_bypass_disable=prctl·An·example·of·this·is·reading·memory | ||
| 122 | ······························to·the·default·GRUB·2·command·line·for·the···to·which·the·attacker·does·not | ||
| 123 | ······························Linux·operating·system.·To·ensure·that·······directly·have·access,·for·example | ||
| 124 | ······························spec_store_bypass_disable=prctl·is·added·as··inside·the·sandboxed·code. | ||
| 125 | ······························a·kernel·command·line·argument·to·newly | 110 | ······························as·a·kernel·command·line·argument·to·newly···reference·to·that·object·after·being |
| 111 | ······························installed·kernels,·add·slub_debug=P·to·the···freed·or·before·being·initialized·will | ||
| 112 | R8··Enable·SLUB/SLAB··········default·Grub2·command·line·for·Linux·········be·detected·and·prevented.·This | ||
| 113 | ····allocator·poisoning·······operating·systems.·Modify·the·line·within·/··prevents·many·types·of·use-after-free | ||
| 114 | ······························etc/default/grub·as·shown·below:·············vulnerabilities·at·little·performance | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·slub_debug=P·..."····cost.·Also·prevents·leak·of·data·and | ||
| 116 | ······························Run·the·following·command·to·update·command··detection·of·corrupted·memory. | ||
| 126 | ······························installed·kernels | 117 | ······························line·for·already·installed·kernels: |
| 127 | ······························spec_store_bypass_disable=prctl·to·the | ||
| 128 | ······························ | 118 | ······························#·grubby·--update-kernel=ALL·-- |
| 119 | ······························args="slub_debug=P" | ||
| 120 | ······························L1·Terminal·Fault·(L1TF)·is·a·hardware | ||
| 121 | ······························vulnerability·which·allows·unprivileged | ||
| 122 | ······························speculative·access·to·data·which·is | ||
| 123 | ······························available·in·the·Level·1·Data·Cache·when·the | ||
| 124 | ······························page·table·entry·isn't·present.·Select·the | ||
| 125 | ······························appropriate·mitigation·by·adding·the | ||
| Max diff block lines reached; 667574/680063 bytes (98.16%) of diff not shown. | |||
| Offset 1623, 138 lines modified | Offset 1623, 138 lines modified | ||
| 00006560:·6520·7468·6520·7379·7374·656d·2074·6f20··e·the·system·to· | 00006560:·6520·7468·6520·7379·7374·656d·2074·6f20··e·the·system·to· | ||
| 00006570:·706f·7465·6e74·6961·6c20·636f·6d70·726f··potential·compro | 00006570:·706f·7465·6e74·6961·6c20·636f·6d70·726f··potential·compro | ||
| 00006580:·6d69·7365·2e0a·2020·2020·2020·3c2f·7464··mise..······</td | 00006580:·6d69·7365·2e0a·2020·2020·2020·3c2f·7464··mise..······</td | ||
| 00006590:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | 00006590:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | ||
| 000065a0:·3c74·723e·0a20·2020·2020·203c·7464·3e31··<tr>.······<td>1 | 000065a0:·3c74·723e·0a20·2020·2020·203c·7464·3e31··<tr>.······<td>1 | ||
| 000065b0:·2e32·2e32·3c2f·7464·3e0a·2020·2020·2020··.2.2</td>.······ | 000065b0:·2e32·2e32·3c2f·7464·3e0a·2020·2020·2020··.2.2</td>.······ | ||
| 000065c0:·3c74·643e·456e·7375·7265·2067·7067·6368··<td>Ensure·gpgch | 000065c0:·3c74·643e·456e·7375·7265·2067·7067·6368··<td>Ensure·gpgch | ||
| 000065d0:·6563·6b20·456e·6162·6c65·6420· | 000065d0:·6563·6b20·456e·6162·6c65·6420·666f·7220··eck·Enabled·for· | ||
| 000065e0:·6169·6e20·7975·6d20·436f·6e66·6967·7572··ain·yum·Configur | |||
| 000065f0:·6174·696f·6e3c·2f74·643e·0a20·2020·2020··ation</td>.····· | |||
| 00006 | 000065e0:·416c·6c20·7975·6d20·5061·636b·6167·6520··All·yum·Package· | ||
| 000065f0:·5265·706f·7369·746f·7269·6573·3c2f·7464··Repositories</td | |||
| 00006600:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 00006610:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 00006620:·2020·2020·2020·546f·2065·6e73·7572·6520········To·ensure· | |||
| 00006630:·7369·676e·6174·7572·6520·6368·6563·6b69··signature·checki | |||
| 00006640:·6e67·2069·7320·6e6f·7420·6469·7361·626c··ng·is·not·disabl | |||
| 00006650:·6564·2066·6f72·0a61·6e79·2072·6570·6f73··ed·for.any·repos | |||
| 00006660:·2c20·7265·6d6f·7665·2061·6e79·206c·696e··,·remove·any·lin | |||
| 00006670:·6573·2066·726f·6d20·6669·6c65·7320·696e··es·from·files·in | |||
| 00006680:·203c·7474·3e2f·6574·632f·7975·6d2e·7265···<tt>/etc/yum.re | |||
| 00006690:·706f·732e·643c·2f74·743e·206f·6620·7468··pos.d</tt>·of·th | |||
| 000066a0:·6520·666f·726d·3a0a·3c70·7265·3e67·7067··e·form:.<pre>gpg | |||
| 000066b0:·6368·6563·6b3d·303c·2f70·7265·3e0a·2020··check=0</pre>.·· | |||
| 000066c0:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 000066d0:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 000066 | 000066e0:·2d55·5322·3e0a·2020·2020·2020·2020·5665··-US">.········Ve | ||
| 000066f0:·7269·6679·696e·6720·7468·6520·6175·7468··rifying·the·auth | |||
| 00006700:·656e·7469·6369·7479·206f·6620·7468·6520··enticity·of·the· | |||
| 00006710:·736f·6674·7761·7265·2070·7269·6f72·2074··software·prior·t | |||
| 00006620:·6865·203c·7474·3e67·7067·6368·6563·6b3c··he·<tt>gpgcheck< | |||
| 00006630:·2f74·743e·206f·7074·696f·6e20·636f·6e74··/tt>·option·cont | |||
| 00006640:·726f·6c73·2077·6865·7468·6572·0a52·504d··rols·whether.RPM | |||
| 00006650:·2070·6163·6b61·6765·7327·2073·6967·6e61···packages'·signa | |||
| 00006660:·7475·7265·7320·6172·6520·616c·7761·7973··tures·are·always | |||
| 00006670:·2063·6865·636b·6564·2070·7269·6f72·2074···checked·prior·t | |||
| 00006 | 00006720:·6f20·696e·7374·616c·6c61·7469·6f6e·2076··o·installation·v | ||
| 00006690:·546f·2063·6f6e·6669·6775·7265·2079·756d··To·configure·yum | |||
| 000066a0:·2074·6f20·6368·6563·6b20·7061·636b·6167···to·check·packag | |||
| 000066b0:·6520·7369·676e·6174·7572·6573·2062·6566··e·signatures·bef | |||
| 000066c0:·6f72·6520·696e·7374·616c·6c69·6e67·0a74··ore·installing.t | |||
| 000066d0:·6865·6d2c·2065·6e73·7572·6520·7468·6520··hem,·ensure·the· | |||
| 000066e0:·666f·6c6c·6f77·696e·6720·6c69·6e65·2061··following·line·a | |||
| 000066f0:·7070·6561·7273·2069·6e20·3c74·743e·2f65··ppears·in·<tt>/e | |||
| 00006700:·7463·2f79·756d·2e63·6f6e·663c·2f74·743e··tc/yum.conf</tt> | |||
| 00006710:·2069·6e0a·7468·6520·3c74·743e·5b6d·6169···in.the·<tt>[mai | |||
| 00006720:·6e5d·3c2f·7474·3e20·7365·6374·696f·6e3a··n]</tt>·section: | |||
| 00006730:·0a3c·7072·653e·6770·6763·6865·636b·3d31··.<pre>gpgcheck=1 | |||
| 00006740:·3c2f·7072·653e·0a20·2020·2020·203c·2f74··</pre>.······</t | |||
| 00006750:·643e·0a20·2020·2020·203c·7464·2078·6d6c··d>.······<td·xml | |||
| 00006760:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | |||
| 00006770:·2020·2020·2020·2043·6861·6e67·6573·2074·········Changes·t | |||
| 00006780:·6f20·616e·7920·736f·6674·7761·7265·2063··o·any·software·c | |||
| 00006790:·6f6d·706f·6e65·6e74·7320·6361·6e20·6861··omponents·can·ha | |||
| 000067a0:·7665·2073·6967·6e69·6669·6361·6e74·2065··ve·significant·e | |||
| 000067b0:·6666·6563·7473·206f·6e20·7468·650a·6f76··ffects·on·the.ov | |||
| 000067c0:·6572·616c·6c20·7365·6375·7269·7479·206f··erall·security·o | |||
| 000067d0:·6620·7468·6520·6f70·6572·6174·696e·6720··f·the·operating· | |||
| 000067e0:·7379·7374·656d·2e20·5468·6973·2072·6571··system.·This·req | |||
| 000067f0:·7569·7265·6d65·6e74·2065·6e73·7572·6573··uirement·ensures | |||
| 00006800:·2074·6865·0a73·6f66·7477·6172·6520·6861···the.software·ha | |||
| 00006810:·7320·6e6f·7420·6265·656e·2074·616d·7065··s·not·been·tampe | |||
| 00006820:·7265·6420·7769·7468·2061·6e64·2074·6861··red·with·and·tha | |||
| 00006830:·7420·6974·2068·6173·2062·6565·6e20·7072··t·it·has·been·pr | |||
| 00006840:·6f76·6964·6564·2062·7920·610a·7472·7573··ovided·by·a.trus | |||
| 00006850:·7465·6420·7665·6e64·6f72·2e0a·3c62·7220··ted·vendor..<br· | |||
| 00006860:·2f3e·0a41·6363·6f72·6469·6e67·6c79·2c20··/>.Accordingly,· | |||
| 00006870:·7061·7463·6865·732c·2073·6572·7669·6365··patches,·service | |||
| 00006880:·2070·6163·6b73·2c20·6465·7669·6365·2064···packs,·device·d | |||
| 00006890:·7269·7665·7273·2c20·6f72·206f·7065·7261··rivers,·or·opera | |||
| 000068a0:·7469·6e67·2073·7973·7465·6d0a·636f·6d70··ting·system.comp | |||
| 000068b0:·6f6e·656e·7473·206d·7573·7420·6265·2073··onents·must·be·s | |||
| 000068c0:·6967·6e65·6420·7769·7468·2061·2063·6572··igned·with·a·cer | |||
| 000068d0:·7469·6669·6361·7465·2072·6563·6f67·6e69··tificate·recogni | |||
| 000068e0:·7a65·6420·616e·6420·6170·7072·6f76·6564··zed·and·approved | |||
| 000068f0:·2062·7920·7468·650a·6f72·6761·6e69·7a61···by·the.organiza | |||
| 00006900:·7469·6f6e·2e0a·3c62·7220·2f3e·5665·7269··tion..<br·/>Veri | |||
| 00006910:·6679·696e·6720·7468·6520·6175·7468·656e··fying·the·authen | |||
| 00006920:·7469·6369·7479·206f·6620·7468·6520·736f··ticity·of·the·so | |||
| 00006930:·6674·7761·7265·2070·7269·6f72·2074·6f20··ftware·prior·to· | |||
| 00006940:·696e·7374·616c·6c61·7469·6f6e·0a76·616c··installation.val | |||
| 00006950:·6964·6174·6573·2074·6865·2069·6e74·6567··idates·the·integ | |||
| 00006960:·7269·7479·206f·6620·7468·6520·7061·7463··rity·of·the·patc | |||
| 00006970:·6820·6f72·2075·7067·7261·6465·2072·6563··h·or·upgrade·rec | |||
| 00006980:·6569·7665·6420·6672·6f6d·2061·2076·656e··eived·from·a·ven | |||
| 00006990:·646f·722e·0a54·6869·7320·656e·7375·7265··dor..This·ensure | |||
| 000069a0:·7320·7468·6520·736f·6674·7761·7265·2068··s·the·software·h | |||
| 000069b0:·6173·206e·6f74·2062·6565·6e20·7461·6d70··as·not·been·tamp | |||
| 000069c0:·6572·6564·2077·6974·6820·616e·6420·7468··ered·with·and·th | |||
| 000069d0:·6174·2069·7420·6861·7320·6265·656e·0a70··at·it·has·been.p | |||
| 000069e0:·726f·7669·6465·6420·6279·2061·2074·7275··rovided·by·a·tru | |||
| 000069f0:·7374·6564·2076·656e·646f·722e·2053·656c··sted·vendor.·Sel | |||
| 00006a00:·662d·7369·676e·6564·2063·6572·7469·6669··f-signed·certifi | |||
| 00006a10:·6361·7465·7320·6172·6520·6469·7361·6c6c··cates·are·disall | |||
| 00006a20:·6f77·6564·2062·790a·7468·6973·2072·6571··owed·by.this·req | |||
| 00006a30:·7569·7265·6d65·6e74·2e20·4365·7274·6966··uirement.·Certif | |||
| 00006a40:·6963·6174·6573·2075·7365·6420·746f·2076··icates·used·to·v | |||
| 00006a50:·6572·6966·7920·7468·6520·736f·6674·7761··erify·the·softwa | |||
| 00006a60:·7265·206d·7573·7420·6265·2066·726f·6d20··re·must·be·from· | |||
| 00006a70:·616e·0a61·7070·726f·7665·6420·4365·7274··an.approved·Cert | |||
| 00006a80:·6966·6963·6174·6520·4175·7468·6f72·6974··ificate·Authorit | |||
| 00006a90:·7920·2843·4129·2e0a·2020·2020·2020·3c2f··y·(CA)..······</ | |||
| 00006aa0:·7464·3e0a·2020·2020·3c2f·7472·3e0a·2020··td>.····</tr>.·· | |||
| 00006ab0:·2020·3c74·723e·0a20·2020·2020·203c·7464····<tr>.······<td | |||
| 00006ac0:·3e31·2e32·2e32·3c2f·7464·3e0a·2020·2020··>1.2.2</td>.···· | |||
| 00006ad0:·2020·3c74·643e·456e·7375·7265·2067·7067····<td>Ensure·gpg | |||
| 00006ae0:·6368·6563·6b20·456e·6162·6c65·6420·666f··check·Enabled·fo | |||
| 00006af0:·7220·416c·6c20·7975·6d20·5061·636b·6167··r·All·yum·Packag | |||
| 00006b00:·6520·5265·706f·7369·746f·7269·6573·3c2f··e·Repositories</ | |||
| 00006b10:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | |||
| 00006b20:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | |||
| 00006b30:·2020·2020·2020·2020·546f·2065·6e73·7572··········To·ensur | |||
| 00006b40:·6520·7369·676e·6174·7572·6520·6368·6563··e·signature·chec | |||
| 00006b50:·6b69·6e67·2069·7320·6e6f·7420·6469·7361··king·is·not·disa | |||
| 00006b60:·626c·6564·2066·6f72·0a61·6e79·2072·6570··bled·for.any·rep | |||
| 00006b70:·6f73·2c20·7265·6d6f·7665·2061·6e79·206c··os,·remove·any·l | |||
| 00006b80:·696e·6573·2066·726f·6d20·6669·6c65·7320··ines·from·files· | |||
| 00006b90:·696e·203c·7474·3e2f·6574·632f·7975·6d2e··in·<tt>/etc/yum. | |||
| 00006ba0:·7265·706f·732e·643c·2f74·743e·206f·6620··repos.d</tt>·of· | |||
| 00006bb0:·7468·6520·666f·726d·3a0a·3c70·7265·3e67··the·form:.<pre>g | |||
| 00006bc0:·7067·6368·6563·6b3d·303c·2f70·7265·3e0a··pgcheck=0</pre>. | |||
| 00006bd0:·2020·2020·2020·3c2f·7464·3e0a·2020·2020········</td>.···· | |||
| 00006be0:·2020·3c74·6420·786d·6c3a·6c61·6e67·3d22····<td·xml:lang=" | |||
| 00006bf0:·656e·2d55·5322·3e0a·2020·2020·2020·2020··en-US">.········ | |||
| 00006c00:·5665·7269·6679·696e·6720·7468·6520·6175··Verifying·the·au | |||
| 00006c10:·7468·656e·7469·6369·7479·206f·6620·7468··thenticity·of·th | |||
| 00006c20:·6520·736f·6674·7761·7265·2070·7269·6f72··e·software·prior | |||
| Max diff block lines reached; 1192672/1210362 bytes (98.54%) of diff not shown. | |||
| Offset 367, 14 lines modified | Offset 367, 37 lines modified | ||
| 367 | ······································The·noexec·mount·option·can·be·used·to·prevent·········directories·such·as | 367 | ······································The·noexec·mount·option·can·be·used·to·prevent·········directories·such·as |
| 368 | 1.1.3.5.4·········Add·noexec·Option···binaries·from·being·executed·out·of·/var/tmp.·Add·the··/var/tmp·should | 368 | 1.1.3.5.4·········Add·noexec·Option···binaries·from·being·executed·out·of·/var/tmp.·Add·the··/var/tmp·should |
| 369 | ··················to·/var/tmp·········noexec·option·to·the·fourth·column·of·/etc/fstab·for···never·be·necessary | 369 | ··················to·/var/tmp·········noexec·option·to·the·fourth·column·of·/etc/fstab·for···never·be·necessary |
| 370 | ······································the·line·which·controls·mounting·of·/var/tmp.··········in·normal·operation | 370 | ······································the·line·which·controls·mounting·of·/var/tmp.··········in·normal·operation |
| 371 | ·····························································································and·can·expose·the | 371 | ·····························································································and·can·expose·the |
| 372 | ·····························································································system·to·potential | 372 | ·····························································································system·to·potential |
| 373 | ·····························································································compromise. | 373 | ·····························································································compromise. |
| 374 | ·····························································································Verifying·the | ||
| 375 | ·····························································································authenticity·of·the | ||
| 376 | ·····························································································software·prior·to | ||
| 377 | ·····························································································installation | ||
| 378 | ·····························································································validates·the | ||
| 379 | ·····························································································integrity·of·the | ||
| 380 | ·····························································································patch·or·upgrade | ||
| 381 | ·····························································································received·from·a | ||
| 382 | ·····························································································vendor.·This·ensures | ||
| 383 | ··················Ensure·gpgcheck·····To·ensure·signature·checking·is·not·disabled·for·any···the·software·has·not | ||
| 384 | ··················Enabled·for·All·yum·repos,·remove·any·lines·from·files·in·/etc/yum.repos.d·been·tampered·with | ||
| 385 | 1.2.2·············Package·············of·the·form:···········································and·that·it·has·been | ||
| 386 | ··················Repositories········gpgcheck=0·············································provided·by·a | ||
| 387 | ·····························································································trusted·vendor. | ||
| 388 | ·····························································································Self-signed | ||
| 389 | ·····························································································certificates·are | ||
| 390 | ·····························································································disallowed·by·this | ||
| 391 | ·····························································································requirement. | ||
| 392 | ·····························································································Certificates·used·to | ||
| 393 | ·····························································································verify·the·software | ||
| 394 | ·····························································································must·be·from·an | ||
| 395 | ·····························································································approved·Certificate | ||
| 396 | ·····························································································Authority·(CA)." | ||
| 374 | ·····························································································Changes·to·any | 397 | ·····························································································Changes·to·any |
| 375 | ·····························································································software·components | 398 | ·····························································································software·components |
| 376 | ·····························································································can·have·significant | 399 | ·····························································································can·have·significant |
| 377 | ·····························································································effects·on·the | 400 | ·····························································································effects·on·the |
| 378 | ·····························································································overall·security·of | 401 | ·····························································································overall·security·of |
| 379 | ·····························································································the·operating | 402 | ·····························································································the·operating |
| 380 | ·····························································································system.·This | 403 | ·····························································································system.·This |
| Offset 414, 37 lines modified | Offset 437, 14 lines modified | ||
| 414 | ·····························································································disallowed·by·this | 437 | ·····························································································disallowed·by·this |
| 415 | ·····························································································requirement. | 438 | ·····························································································requirement. |
| 416 | ·····························································································Certificates·used·to | 439 | ·····························································································Certificates·used·to |
| 417 | ·····························································································verify·the·software | 440 | ·····························································································verify·the·software |
| 418 | ·····························································································must·be·from·an | 441 | ·····························································································must·be·from·an |
| 419 | ·····························································································approved·Certificate | 442 | ·····························································································approved·Certificate |
| 420 | ·····························································································Authority·(CA). | 443 | ·····························································································Authority·(CA). |
| 421 | ·····························································································Verifying·the | ||
| 422 | ·····························································································authenticity·of·the | ||
| 423 | ·····························································································software·prior·to | ||
| 424 | ·····························································································installation | ||
| 425 | ·····························································································validates·the | ||
| 426 | ·····························································································integrity·of·the | ||
| 427 | ·····························································································patch·or·upgrade | ||
| 428 | ·····························································································received·from·a | ||
| 429 | ·····························································································vendor.·This·ensures | ||
| 430 | ··················Ensure·gpgcheck·····To·ensure·signature·checking·is·not·disabled·for·any···the·software·has·not | ||
| 431 | ··················Enabled·for·All·yum·repos,·remove·any·lines·from·files·in·/etc/yum.repos.d·been·tampered·with | ||
| 432 | 1.2.2·············Package·············of·the·form:···········································and·that·it·has·been | ||
| 433 | ··················Repositories········gpgcheck=0·············································provided·by·a | ||
| 434 | ·····························································································trusted·vendor. | ||
| 435 | ·····························································································Self-signed | ||
| 436 | ·····························································································certificates·are | ||
| 437 | ·····························································································disallowed·by·this | ||
| 438 | ·····························································································requirement. | ||
| 439 | ·····························································································Certificates·used·to | ||
| 440 | ·····························································································verify·the·software | ||
| 441 | ·····························································································must·be·from·an | ||
| 442 | ·····························································································approved·Certificate | ||
| 443 | ·····························································································Authority·(CA)." | ||
| 444 | ·····························································································Password·protection | 444 | ·····························································································Password·protection |
| 445 | ······································The·grub2·boot·loader·should·have·a·superuser·account··on·the·boot·loader | 445 | ······································The·grub2·boot·loader·should·have·a·superuser·account··on·the·boot·loader |
| 446 | ······································and·password·protection·enabled·to·protect·boot-time···configuration | 446 | ······································and·password·protection·enabled·to·protect·boot-time···configuration |
| 447 | ······································settings.··············································ensures·users·with | 447 | ······································settings.··············································ensures·users·with |
| 448 | ·····························································································physical·access | 448 | ·····························································································physical·access |
| 449 | 1.3.1·············Set·Boot·Loader·····Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially | 449 | 1.3.1·············Set·Boot·Loader·····Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially |
| 450 | ··················Password·in·grub2···generate·a·hash·for·the·password·by·running·the········alter·important | 450 | ··················Password·in·grub2···generate·a·hash·for·the·password·by·running·the········alter·important |
| Offset 473, 24 lines modified | Offset 473, 41 lines modified | ||
| 473 | 1.3.2·············user.cfg·User·······file.·To·properly·set·the·owner·of·/boot/grub2/········read·the·boot | 473 | 1.3.2·············user.cfg·User·······file.·To·properly·set·the·owner·of·/boot/grub2/········read·the·boot |
| 474 | ··················Ownership···········user.cfg,·run·the·command:·····························parameters·may·be | 474 | ··················Ownership···········user.cfg,·run·the·command:·····························parameters·may·be |
| 475 | ······································$·sudo·chown·root·/boot/grub2/user.cfg·················able·to·identify | 475 | ······································$·sudo·chown·root·/boot/grub2/user.cfg·················able·to·identify |
| 476 | ·····························································································weaknesses·in | 476 | ·····························································································weaknesses·in |
| 477 | ·····························································································security·upon·boot | 477 | ·····························································································security·upon·boot |
| 478 | ·····························································································and·be·able·to | 478 | ·····························································································and·be·able·to |
| 479 | ·····························································································exploit·them. | 479 | ·····························································································exploit·them. |
| 480 | ·····························································································The·root·group·is·a | ||
| 481 | ······································The·file·/boot/grub2/grub.cfg·should·be·group-owned·by·highly-privileged | ||
| 482 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·destruction·or·modification··group.·Furthermore, | ||
| 483 | 1.3.2·············grub.cfg·Group······of·the·file.·To·properly·set·the·group·owner·of·/boot/·the·group-owner·of | ||
| 484 | ··················Ownership···········grub2/grub.cfg,·run·the·command:·······················this·file·should·not | ||
| 485 | ······································$·sudo·chgrp·root·/boot/grub2/grub.cfg·················have·any·access | ||
| 486 | ·····························································································privileges·anyway. | ||
| 480 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions | 487 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions |
| 481 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the | 488 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the |
| 482 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read | 489 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read |
| 483 | ··················Permissions·········$·sudo·chmod·600·/boot/efi/EFI/redhat/user.cfg·········or·modify·important | 490 | ··················Permissions·········$·sudo·chmod·600·/boot/efi/EFI/redhat/user.cfg·········or·modify·important |
| 484 | ·····························································································boot·parameters. | 491 | ·····························································································boot·parameters. |
| 492 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be | ||
| 493 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify | ||
| 494 | 1.3.2·············grub.cfg·User·······modification·of·the·file.·To·properly·set·the·owner·of·important·boot | ||
| 495 | ··················Ownership···········/boot/efi/EFI/redhat/grub.cfg,·run·the·command:········parameters. | ||
| 496 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/grub.cfg | ||
| 485 | ······································File·permissions·for·/boot/grub2/ | 497 | ······································File·permissions·for·/boot/grub2/grub.cfg·should·be····Proper·permissions |
| 486 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | 498 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the |
| 487 | 1.3.2············· | 499 | 1.3.2·············grub.cfg············grub2/grub.cfg,·run·the·command:·······················root·user·can·modify |
| 488 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/ | 500 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/grub.cfg··················important·boot |
| 489 | ····························································································· | 501 | ·····························································································parameters. |
| 502 | ······································The·file·/boot/grub2/grub.cfg·should·be·owned·by·the···Only·root·should·be | ||
| 503 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify | ||
| 504 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot | ||
| 505 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. | ||
| 506 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg | ||
| 490 | ·····························································································The·root·group·is·a | 507 | ·····························································································The·root·group·is·a |
| 491 | ·····························································································highly-privileged | 508 | ·····························································································highly-privileged |
| 492 | ·····························································································group.·Furthermore, | 509 | ·····························································································group.·Furthermore, |
| 493 | ·····························································································the·group-owner·of | 510 | ·····························································································the·group-owner·of |
| 494 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not | 511 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not |
| 495 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access | 512 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access |
| 496 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. | 513 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. |
| Offset 498, 24 lines modified | Offset 515, 26 lines modified | ||
| 498 | ··················Group·Ownership·····command:···············································read·the·boot | 515 | ··················Group·Ownership·····command:···············································read·the·boot |
| 499 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/user.cfg········parameters·may·be | 516 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/user.cfg········parameters·may·be |
| 500 | ·····························································································able·to·identify | 517 | ·····························································································able·to·identify |
| 501 | ·····························································································weaknesses·in | 518 | ·····························································································weaknesses·in |
| 502 | ·····························································································security·upon·boot | 519 | ·····························································································security·upon·boot |
| 503 | ·····························································································and·be·able·to | 520 | ·····························································································and·be·able·to |
| 504 | ·····························································································exploit·them. | 521 | ·····························································································exploit·them. |
| 505 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be | ||
| 506 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify | ||
| Max diff block lines reached; 359884/376472 bytes (95.59%) of diff not shown. | |||
| Offset 40, 71 lines modified | Offset 40, 32 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Red·Hat·Enterprise·Linux·8's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1</td> | ||
| 74 | ······<td>Disable·GDM·Guest·Login</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·login·without·credentials | ||
| 77 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 78 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 79 | timed·logins·or·guest·account·access,·set·the·<tt>TimedLoginEnable</tt>·to·<tt>false</tt>·in | ||
| 80 | the·<tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 81 | <pre>[daemon] | ||
| 82 | TimedLoginEnable=false</pre> | ||
| 83 | ······</td> | ||
| 84 | ······<td·xml:lang="en-US"> | ||
| 85 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 86 | system·security. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 90 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 91 | ······<td> | 48 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 92 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 93 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 94 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 95 | <pre>vc/1 | ||
| 96 | vc/2 | ||
| 97 | vc/3 | ||
| 98 | 50 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | |
| 51 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 52 | their·UID·changed. | ||
| 53 | <br·/> | ||
| 54 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 55 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 56 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 57 | assigned. | ||
| 99 | ······</td> | 58 | ······</td> |
| 100 | ······<td·xml:lang="en-US"> | 59 | ······<td·xml:lang="en-US"> |
| 101 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 102 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 103 | usi | 60 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts |
| 61 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 62 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 63 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 64 | access·to·root·privileges·in·an·accountable·manner. | ||
| 104 | ······</td> | 65 | ······</td> |
| 105 | ····</tr> | 66 | ····</tr> |
| 106 | ····<tr> | 67 | ····<tr> |
| 107 | ······<td>3.1.1<br/>3.1.5</td> | 68 | ······<td>3.1.1<br/>3.1.5</td> |
| 108 | ······<td>Disable·SSH·Root·Login</td> | 69 | ······<td>Disable·SSH·Root·Login</td> |
| 109 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 110 | ········The·root·user·should·never·be·allowed·to·login·to·a | 71 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| Offset 121, 32 lines modified | Offset 82, 28 lines modified | ||
| 121 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | 82 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. |
| 122 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 83 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 123 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 84 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 124 | direct·attack·attempts·on·root's·password. | 85 | direct·attack·attempts·on·root's·password. |
| 125 | ······</td> | 86 | ······</td> |
| 126 | ····</tr> | 87 | ····</tr> |
| 127 | ····<tr> | 88 | ····<tr> |
| 128 | ······<td>3.1.1<br/>3. | 89 | ······<td>3.1.1<br/>3.4.5</td> |
| 129 | ······<td> | 90 | ······<td>Require·Authentication·for·Emergency·Systemd·Target</td> |
| 130 | ······<td·xml:lang="en-US"> | 91 | ······<td·xml:lang="en-US"> |
| 92 | ········Emergency·mode·is·intended·as·a·system·recovery | ||
| 93 | method,·providing·a·single·user·root·access·to·the·system | ||
| 94 | during·a·failed·boot·sequence. | ||
| 95 | <br·/><br·/> | ||
| 96 | By·default,·Emergency·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 97 | in·<tt>/usr/lib/systemd/system/emergency.service</tt>. | ||
| 131 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 132 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 133 | their·UID·changed. | ||
| 134 | <br·/> | ||
| 135 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 136 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 137 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 138 | assigned. | ||
| 139 | ······</td> | 98 | ······</td> |
| 140 | ······<td·xml:lang="en-US"> | 99 | ······<td·xml:lang="en-US"> |
| 100 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 101 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 102 | by·configuring·the·bootloader·password. | ||
| 141 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 142 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 143 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 144 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 145 | access·to·root·privileges·in·an·accountable·manner. | ||
| 146 | ······</td> | 103 | ······</td> |
| 147 | ····</tr> | 104 | ····</tr> |
| 148 | ····<tr> | 105 | ····<tr> |
| 149 | ······<td>3.1.1</td> | 106 | ······<td>3.1.1</td> |
| 150 | ······<td>Disable·GDM·Automatic·Login</td> | 107 | ······<td>Disable·GDM·Automatic·Login</td> |
| 151 | ······<td·xml:lang="en-US"> | 108 | ······<td·xml:lang="en-US"> |
| 152 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | 109 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| Offset 159, 43 lines modified | Offset 116, 28 lines modified | ||
| 159 | ······</td> | 116 | ······</td> |
| 160 | ······<td·xml:lang="en-US"> | 117 | ······<td·xml:lang="en-US"> |
| Max diff block lines reached; 453195/459122 bytes (98.71%) of diff not shown. | |||
| Offset 1, 48 lines modified | Offset 1, 31 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of·Red | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of·Red |
| 2 | Hat·Enterprise·Linux·8 | 2 | Hat·Enterprise·Linux·8 |
| 3 | ·······································To·further·limit·access·to·the·root·account, | ||
| 4 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 5 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 6 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 7 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 8 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 9 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 10 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 11 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 12 | ·······································plain·text·over·the·network.·By·default,·Red·Hat·······login,·then·escalate | ||
| 13 | ·······································Enterprise·Linux·8's·/etc/securetty·file·only·allows···to·privileged·(root) | ||
| 14 | ·······································the·root·user·to·login·at·the·console·physically·······access·via·su·/ | ||
| 15 | ·······································attached·to·the·system.·To·prevent·root·from·logging···sudo.·This·is | ||
| 16 | ·······································in,·remove·the·contents·of·this·file.·To·prevent·······required·for·FISMA | ||
| 17 | ·······································direct·root·logins,·remove·the·contents·of·this·file···Low·and·FISMA | ||
| 18 | ·······································by·typing·the·following·command:·······················Moderate·systems. | ||
| 19 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 20 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 21 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 22 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 23 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 24 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 25 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 26 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 27 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 28 | ·······································[daemon] | ||
| 29 | ·······································TimedLoginEnable=false | ||
| 30 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 31 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 32 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 33 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 34 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 35 | ·······································vc/3···················································actions·taken·on·the | ||
| 36 | ·······································vc/4···················································system·using·the | ||
| 37 | ······························································································ | 3 | ······························································································An·account·has·root |
| 4 | ······························································································authority·if·it·has | ||
| 5 | ······························································································a·UID·of·0.·Multiple | ||
| 6 | ······························································································accounts·with·a·UID | ||
| 7 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | ||
| 8 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | ||
| 9 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | ||
| 10 | ·······································their·UID·changed.·····································to·guess·a·password | ||
| 11 | 3.1.1···Verify·Only·Root·Has·UID·0·····If·the·account·is·associated·with·system·commands·or···for·a·privileged | ||
| 12 | 3.1.5··································applications·the·UID·should·be·changed·to·one·greater··account.·Proper | ||
| 13 | ·······································than·"0"·but·less·than·"1000."·Otherwise·assign·a·UID··configuration·of | ||
| 14 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | ||
| 15 | ·······································assigned.··············································to·afford·multiple | ||
| 16 | ······························································································system | ||
| 17 | ······························································································administrators | ||
| 18 | ······························································································access·to·root | ||
| 19 | ······························································································privileges·in·an | ||
| 20 | ······························································································accountable·manner. | ||
| 38 | ······························································································Even·though·the | 21 | ······························································································Even·though·the |
| 39 | ······························································································communications | 22 | ······························································································communications |
| 40 | ······························································································channel·may·be | 23 | ······························································································channel·may·be |
| 41 | ······························································································encrypted,·an | 24 | ······························································································encrypted,·an |
| 42 | ······························································································additional·layer·of | 25 | ······························································································additional·layer·of |
| 43 | ······························································································security·is·gained | 26 | ······························································································security·is·gained |
| 44 | ······························································································by·extending·the | 27 | ······························································································by·extending·the |
| Offset 56, 61 lines modified | Offset 39, 45 lines modified | ||
| 56 | ······························································································accountability·of | 39 | ······························································································accountability·of |
| 57 | ······························································································actions·performed·on | 40 | ······························································································actions·performed·on |
| 58 | ······························································································the·system·and·also | 41 | ······························································································the·system·and·also |
| 59 | ······························································································helps·to·minimize | 42 | ······························································································helps·to·minimize |
| 60 | ······························································································direct·attack | 43 | ······························································································direct·attack |
| 61 | ······························································································attempts·on·root's | 44 | ······························································································attempts·on·root's |
| 62 | ······························································································password. | 45 | ······························································································password. |
| 63 | ······························································································An·account·has·root | ||
| 64 | ······························································································authority·if·it·has | ||
| 65 | ······························································································a·UID·of·0.·Multiple | ||
| 66 | ······························································································accounts·with·a·UID | ||
| 67 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | ||
| 68 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | ||
| 69 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | ||
| 70 | ·······································their·UID·changed.·····································to·guess·a·password | ||
| 71 | 3.1.1···Verify·Only·Root·Has·UID·0·····If·the·account·is·associated·with·system·commands·or···for·a·privileged | ||
| 72 | 3.1.5··································applications·the·UID·should·be·changed·to·one·greater··account.·Proper | ||
| 73 | ·······································than·"0"·but·less·than·"1000."·Otherwise·assign·a·UID··configuration·of | ||
| 74 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | ||
| 75 | ·······································assigned.··············································to·afford·multiple | ||
| 76 | ······························································································s | 46 | ······························································································This·prevents |
| 77 | ······························································································administrators | ||
| 78 | ······························································································a | 47 | ······························································································attackers·with |
| 48 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | ||
| 49 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 50 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | ||
| 51 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | ||
| 52 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | ||
| 53 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | ||
| 79 | ······································· | 54 | ·······································emergency.service.·····································prevented·by |
| 80 | ······························································································ | 55 | ······························································································configuring·the |
| 56 | ······························································································bootloader·password. | ||
| 81 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 57 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 82 | ·······································automatically·login·without·user·interaction·or | 58 | ·······································automatically·login·without·user·interaction·or |
| 83 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | 59 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict |
| 84 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | 60 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to |
| 85 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | 61 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users |
| 86 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | 62 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts |
| 87 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system | 63 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system |
| 88 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. | 64 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. |
| 89 | ·······································[daemon] | 65 | ·······································[daemon] |
| 90 | ·······································AutomaticLoginEnable=false | 66 | ·······································AutomaticLoginEnable=false |
| 67 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 68 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 69 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 70 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 71 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 72 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 73 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 74 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 75 | ·······································[daemon] | ||
| 76 | ·······································TimedLoginEnable=false | ||
| 91 | ······························································································Preventing·direct | ||
| 92 | ······························································································root·login·to·serial | ||
| 93 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 94 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 95 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 96 | ·······································ttyS1··················································actions·taken·on·the | ||
| 97 | ······························································································systems·using·the | ||
| 98 | ······························································································root·account. | ||
| 99 | ······························································································This·prevents | ||
| Max diff block lines reached; 808181/823079 bytes (98.19%) of diff not shown. | |||
| Offset 4048, 15 lines modified | Offset 4048, 15 lines modified | ||
| 4048 | <tt>RekeyLimit</tt>. | 4048 | <tt>RekeyLimit</tt>. |
| 4049 | ··</td> | 4049 | ··</td> |
| 4050 | ··<td·xml:lang="en-US"> | 4050 | ··<td·xml:lang="en-US"> |
| 4051 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4051 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4052 | time-based·limit,·effects·of·potential·attacks·against | 4052 | time-based·limit,·effects·of·potential·attacks·against |
| 4053 | encryption·keys·are·limited. | 4053 | encryption·keys·are·limited. |
| 4054 | ··</td> | 4054 | ··</td> |
| 4055 | ··<td>var_ssh_client_rekey_limit_ | 4055 | ··<td>var_ssh_client_rekey_limit_time=1hour<br/>var_ssh_client_rekey_limit_size=1G</td> |
| 4056 | </tr> | 4056 | </tr> |
| 4057 | <tr> | 4057 | <tr> |
| 4058 | ··<td></td> | 4058 | ··<td></td> |
| 4059 | ··<td>CCE-83349-1</td> | 4059 | ··<td>CCE-83349-1</td> |
| 4060 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> | 4060 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> |
| 4061 | ··<td·xml:lang="en-US"> | 4061 | ··<td·xml:lang="en-US"> |
| 4062 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure | 4062 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure |
| Offset 4111, 15 lines modified | Offset 4111, 15 lines modified | ||
| 4111 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> | 4111 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> |
| 4112 | ··</td> | 4112 | ··</td> |
| 4113 | ··<td·xml:lang="en-US"> | 4113 | ··<td·xml:lang="en-US"> |
| 4114 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4114 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4115 | time-based·limit,·effects·of·potential·attacks·against | 4115 | time-based·limit,·effects·of·potential·attacks·against |
| 4116 | encryption·keys·are·limited. | 4116 | encryption·keys·are·limited. |
| 4117 | ··</td> | 4117 | ··</td> |
| 4118 | ··<td>var_rekey_limit_ | 4118 | ··<td>var_rekey_limit_size=1G<br/>var_rekey_limit_time=1hour</td> |
| 4119 | </tr> | 4119 | </tr> |
| 4120 | <tr> | 4120 | <tr> |
| 4121 | ··<td></td> | 4121 | ··<td></td> |
| 4122 | ··<td>CCE-82462-3</td> | 4122 | ··<td>CCE-82462-3</td> |
| 4123 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> | 4123 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> |
| 4124 | ··<td·xml:lang="en-US"> | 4124 | ··<td·xml:lang="en-US"> |
| 4125 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. | 4125 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. |
| Offset 3299, 16 lines modified | Offset 3299, 16 lines modified | ||
| 3299 | ······················································································································options,·which·can | 3299 | ······················································································································options,·which·can |
| 3300 | ······················································································································help·protect | 3300 | ······················································································································help·protect |
| 3301 | ······················································································································programs·which·use | 3301 | ······················································································································programs·which·use |
| 3302 | ······················································································································it. | 3302 | ······················································································································it. |
| 3303 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the | 3303 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the |
| 3304 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the | 3304 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the |
| 3305 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and | 3305 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and |
| 3306 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_ | 3306 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_time=1hour |
| 3307 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_ | 3307 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_size=1G |
| 3308 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks | 3308 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks |
| 3309 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption | 3309 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption |
| 3310 | ·····························containing·definition·of·RekeyLimit.·····················································keys·are·limited. | 3310 | ·····························containing·definition·of·RekeyLimit.·····················································keys·are·limited. |
| 3311 | ······················································································································Some·SSH | 3311 | ······················································································································Some·SSH |
| 3312 | ······················································································································implementations·use | 3312 | ······················································································································implementations·use |
| 3313 | ······················································································································the·openssl·library | 3313 | ······················································································································the·openssl·library |
| 3314 | ······················································································································for·entropy,·which | 3314 | ······················································································································for·entropy,·which |
| Offset 3359, 16 lines modified | Offset 3359, 16 lines modified | ||
| 3359 | ······················································································································generator·used·by | 3359 | ······················································································································generator·used·by |
| 3360 | ······················································································································SSH·would·be·known | 3360 | ······················································································································SSH·would·be·known |
| 3361 | ······················································································································to·potential | 3361 | ······················································································································to·potential |
| 3362 | ······················································································································attackers. | 3362 | ······················································································································attackers. |
| 3363 | ······················································································································By·decreasing·the | 3363 | ······················································································································By·decreasing·the |
| 3364 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the | 3364 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the |
| 3365 | ·····CCE-···Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and | 3365 | ·····CCE-···Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and |
| 3366 | ·····82177-·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_ | 3366 | ·····82177-·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_size=1G |
| 3367 | ·····7······renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_ | 3367 | ·····7······renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_time=1hour |
| 3368 | ·····························RekeyLimit·1G·1hour······································································potential·attacks | 3368 | ·····························RekeyLimit·1G·1hour······································································potential·attacks |
| 3369 | ······················································································································against·encryption | 3369 | ······················································································································against·encryption |
| 3370 | ······················································································································keys·are·limited. | 3370 | ······················································································································keys·are·limited. |
| 3371 | ······················································································································SSH·implementation | 3371 | ······················································································································SSH·implementation |
| 3372 | ······················································································································in·Red·Hat | 3372 | ······················································································································in·Red·Hat |
| 3373 | ······················································································································Enterprise·Linux·8 | 3373 | ······················································································································Enterprise·Linux·8 |
| 3374 | ······················································································································uses·the·openssl | 3374 | ······················································································································uses·the·openssl |
| Offset 64, 14912 lines modified | Offset 64, 14912 lines modified | ||
| 000003f0:·6e67·3c2f·7468·3e0a·2020·2020·3c74·683e··ng</th>.····<th> | 000003f0:·6e67·3c2f·7468·3e0a·2020·2020·3c74·683e··ng</th>.····<th> | ||
| 00000400:·5275·6c65·2054·6974·6c65·3c2f·7468·3e0a··Rule·Title</th>. | 00000400:·5275·6c65·2054·6974·6c65·3c2f·7468·3e0a··Rule·Title</th>. | ||
| 00000410:·2020·2020·3c74·683e·4465·7363·7269·7074······<th>Descript | 00000410:·2020·2020·3c74·683e·4465·7363·7269·7074······<th>Descript | ||
| 00000420:·696f·6e3c·2f74·683e·0a20·2020·203c·7468··ion</th>.····<th | 00000420:·696f·6e3c·2f74·683e·0a20·2020·203c·7468··ion</th>.····<th | ||
| 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | ||
| 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | Diff chunk too large, falling back to line-by-line diff (7695 lines added, 7695 lines removed) | |
| 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | ||
| 00000460:·2020·3c74·643e·4155·2d32·286 | 00000460:·2020·3c74·643e·4155·2d32·2861·293c·2f74····<td>AU-2(a)</t | ||
| 00000470:· | 00000470:·643e·0a20·2020·2020·203c·7464·3e43·6f6e··d>.······<td>Con | ||
| 00000480:· | 00000480:·6669·6775·7265·2061·7564·6974·696e·6720··figure·auditing· | ||
| 00000490:· | 00000490:·6f66·2075·6e73·7563·6365·7373·6675·6c20··of·unsuccessful· | ||
| 000004a0:· | 000004a0:·6669·6c65·2061·6363·6573·7365·733c·2f74··file·accesses</t | ||
| 000004b0:· | 000004b0:·643e·0a20·2020·2020·203c·7464·2078·6d6c··d>.······<td·xml | ||
| 000004c0:· | 000004c0:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | ||
| 000004d0:· | 000004d0:·2020·2020·2020·2045·6e73·7572·6520·7468·········Ensure·th | ||
| 000004e0:·207 | 000004e0:·6174·2075·6e73·7563·6365·7373·6675·6c20··at·unsuccessful· | ||
| 000004f0:· | 000004f0:·6174·7465·6d70·7473·2074·6f20·6163·6365··attempts·to·acce | ||
| 00000500:·7 | 00000500:·7373·2061·2066·696c·6520·6172·6520·6175··ss·a·file·are·au | ||
| 00000510:·6 | 00000510:·6469·7465·642e·0a0a·5468·6520·666f·6c6c··dited...The·foll | ||
| 00000520:·6 | 00000520:·6f77·696e·6720·7275·6c65·7320·636f·6e66··owing·rules·conf | ||
| 00000530:·6 | 00000530:·6967·7572·6520·6175·6469·7420·6173·2064··igure·audit·as·d | ||
| 00000540:· | 00000540:·6573·6372·6962·6564·2061·626f·7665·3a0a··escribed·above:. | ||
| 00000550:· | 00000550:·3c70·7265·3e23·2320·556e·7375·6363·6573··<pre>##·Unsucces | ||
| 00000560:· | 00000560:·7366·756c·2066·696c·6520·6163·6365·7373··sful·file·access | ||
| 00000570:· | 00000570:·2028·616e·7920·6f74·6865·7220·6f70·656e···(any·other·open | ||
| 00000580:· | 00000580:·7329·2054·6869·7320·6861·7320·746f·2067··s)·This·has·to·g | ||
| 00000590:· | 00000590:·6f20·6c61·7374·2e0a·2d61·2061·6c77·6179··o·last..-a·alway | ||
| 000005a0:·7 | 000005a0:·732c·6578·6974·202d·4620·6172·6368·3d62··s,exit·-F·arch=b | ||
| 000005b0:· | 000005b0:·3332·202d·5320·6f70·656e·2c6f·7065·6e61··32·-S·open,opena | ||
| 000005c0:· | 000005c0:·742c·6f70·656e·6174·322c·6f70·656e·5f62··t,openat2,open_b | ||
| 000005d0:· | 000005d0:·795f·6861·6e64·6c65·5f61·7420·2d46·2065··y_handle_at·-F·e | ||
| 000005e0:· | 000005e0:·7869·743d·2d45·4143·4345·5320·2d46·2061··xit=-EACCES·-F·a | ||
| 000005f0:·7 | 000005f0:·7569·643e·3d31·3030·3020·2d46·2061·7569··uid>=1000·-F·aui | ||
| 00000600:·6 | 00000600:·6421·3d75·6e73·6574·202d·4620·6b65·793d··d!=unset·-F·key= | ||
| 00000610:·7 | 00000610:·756e·7375·6363·6573·7366·756c·2d61·6363··unsuccessful-acc | ||
| 00000620:· | 00000620:·6573·730a·2d61·2061·6c77·6179·732c·6578··ess.-a·always,ex | ||
| 00000630:· | 00000630:·6974·202d·4620·6172·6368·3d62·3634·202d··it·-F·arch=b64·- | ||
| 00000640:· | 00000640:·5320·6f70·656e·2c6f·7065·6e61·742c·6f70··S·open,openat,op | ||
| 00000650:·6 | 00000650:·656e·6174·322c·6f70·656e·5f62·795f·6861··enat2,open_by_ha | ||
| 00000660:· | 00000660:·6e64·6c65·5f61·7420·2d46·2065·7869·743d··ndle_at·-F·exit= | ||
| 00000670:· | 00000670:·2d45·4143·4345·5320·2d46·2061·7569·643e··-EACCES·-F·auid> | ||
| 00000680:· | 00000680:·3d31·3030·3020·2d46·2061·7569·6421·3d75··=1000·-F·auid!=u | ||
| 00000690:· | 00000690:·6e73·6574·202d·4620·6b65·793d·756e·7375··nset·-F·key=unsu | ||
| 000006a0:· | 000006a0:·6363·6573·7366·756c·2d61·6363·6573·730a··ccessful-access. | ||
| 000006b0:·2 | 000006b0:·2d61·2061·6c77·6179·732c·6578·6974·202d··-a·always,exit·- | ||
| 000006c0:· | 000006c0:·4620·6172·6368·3d62·3332·202d·5320·6f70··F·arch=b32·-S·op | ||
| 000006d0:· | 000006d0:·656e·2c6f·7065·6e61·742c·6f70·656e·6174··en,openat,openat | ||
| 000006e0:· | 000006e0:·322c·6f70·656e·5f62·795f·6861·6e64·6c65··2,open_by_handle | ||
| 000006f0:· | 000006f0:·5f61·7420·2d46·2065·7869·743d·2d45·5045··_at·-F·exit=-EPE | ||
| 00000700:· | 00000700:·524d·202d·4620·6175·6964·3e3d·3130·3030··RM·-F·auid>=1000 | ||
| 00000710:· | 00000710:·202d·4620·6175·6964·213d·756e·7365·7420···-F·auid!=unset· | ||
| 00000720:· | 00000720:·2d46·206b·6579·3d75·6e73·7563·6365·7373··-F·key=unsuccess | ||
| 00000730:· | 00000730:·6675·6c2d·6163·6365·7373·0a2d·6120·616c··ful-access.-a·al | ||
| 00000740:·7 | 00000740:·7761·7973·2c65·7869·7420·2d46·2061·7263··ways,exit·-F·arc | ||
| 00000750:· | 00000750:·683d·6236·3420·2d53·206f·7065·6e2c·6f70··h=b64·-S·open,op | ||
| 00000760:· | 00000760:·656e·6174·2c6f·7065·6e61·7432·2c6f·7065··enat,openat2,ope | ||
| 00000770:· | 00000770:·6e5f·6279·5f68·616e·646c·655f·6174·202d··n_by_handle_at·- | ||
| 00000780:· | 00000780:·4620·6578·6974·3d2d·4550·4552·4d20·2d46··F·exit=-EPERM·-F | ||
| 00000790:·2061· | 00000790:·2061·7569·643e·3d31·3030·3020·2d46·2061···auid>=1000·-F·a | ||
| 000007a0:· | 000007a0:·7569·6421·3d75·6e73·6574·202d·4620·6b65··uid!=unset·-F·ke | ||
| 000007b0:·7 | 000007b0:·793d·756e·7375·6363·6573·7366·756c·2d61··y=unsuccessful-a | ||
| 000007c0:· | 000007c0:·6363·6573·7320·2020·203c·2f70·7265·3e0a··ccess····</pre>. | ||
| 000007d0:· | 000007d0:·0a4c·6f61·6420·6e65·7720·4175·6469·7420··.Load·new·Audit· | ||
| 000007e0:·7 | 000007e0:·7275·6c65·7320·696e·746f·206b·6572·6e65··rules·into·kerne | ||
| 000007f0:· | 000007f0:·6c20·6279·2072·756e·6e69·6e67·3a0a·3c70··l·by·running:.<p | ||
| 00000800:· | 00000800:·7265·3e61·7567·656e·7275·6c65·7320·2d2d··re>augenrules·-- | ||
| 00000810:· | 00000810:·6c6f·6164·3c2f·7072·653e·0a0a·4e6f·7465··load</pre>..Note | ||
| 00000820:· | 00000820:·3a20·5468·6973·2072·756c·6520·7573·6573··:·This·rule·uses | ||
| 00000830:·206 | 00000830:·2061·2073·7065·6369·616c·2073·6574·206f···a·special·set·o | ||
| 00000840:· | 00000840:·6620·4175·6469·7420·7275·6c65·7320·746f··f·Audit·rules·to | ||
| 00000850:·2 | 00000850:·2063·6f6d·706c·7920·7769·7468·204f·5350···comply·with·OSP | ||
| 00000860:· | 00000860:·5020·342e·322e·312e·2059·6f75·206d·6179··P·4.2.1.·You·may | ||
| 00000870:· | 00000870:·2072·6575·7365·2074·6869·7320·7275·6c65···reuse·this·rule | ||
| 00000880:· | 00000880:·2069·6e20·6469·6666·6572·656e·7420·7072···in·different·pr | ||
| 00000890:·6 | 00000890:·6f66·696c·6573·2e20·4966·2079·6f75·2064··ofiles.·If·you·d | ||
| 000008a0:·65 | 000008a0:·6563·6964·6520·746f·2064·6f20·736f·2c20··ecide·to·do·so,· | ||
| 000008b0:·6 | 000008b0:·6974·2069·7320·7265·636f·6d6d·656e·6465··it·is·recommende | ||
| 000008c0:· | 000008c0:·6420·7468·6174·2079·6f75·2069·6e73·7065··d·that·you·inspe | ||
| 000008d0:·6 | 000008d0:·6374·2063·6f6e·7465·6e74·7320·6f66·2074··ct·contents·of·t | ||
| 000008e0:· | 000008e0:·6865·2066·696c·6520·636c·6f73·656c·7920··he·file·closely· | ||
| 000008f0:· | 000008f0:·616e·6420·6d61·6b65·2073·7572·6520·7468··and·make·sure·th | ||
| 00000900:· | 00000900:·6174·2074·6865·7920·6172·6520·616c·6c69··at·they·are·alli | ||
| 00000910:· | 00000910:·676e·6564·2077·6974·6820·796f·7572·206e··gned·with·your·n | ||
| 00000920:·6 | 00000920:·6565·6473·2e0a·2020·2020·2020·3c2f·7464··eeds..······</td | ||
| 00000930:· | 00000930:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | ||
| 00000940:· | 00000940:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | ||
| 00000950:· | 00000950:·2020·2020·2020·556e·7375·6363·6573·7366········Unsuccessf | ||
| 00000960:· | 00000960:·756c·2061·7474·656d·7074·7320·746f·2061··ul·attempts·to·a | ||
| 00000970:· | 00000970:·6363·6573·7320·6120·6669·6c65·206d·6967··ccess·a·file·mig | ||
| 00000980:·6 | 00000980:·6874·2062·6520·7369·676e·7320·6f66·206d··ht·be·signs·of·m | ||
| 00000990:·6 | 00000990:·616c·6963·696f·7573·2061·6374·6976·6974··alicious·activit | ||
| 000009a0:· | 000009a0:·7920·6861·7070·656e·696e·6720·7769·7468··y·happening·with | ||
| 000009b0:·6 | 000009b0:·696e·2074·6865·2073·7973·7465·6d2e·2041··in·the·system.·A | ||
| 000009c0:·7 | 000009c0:·7564·6974·696e·6720·6f66·2073·7563·6820··uditing·of·such· | ||
| 000009d0:· | 000009d0:·6163·7469·7669·7469·6573·2068·656c·7073··activities·helps | ||
| 000009e0:·206 | 000009e0:·2069·6e20·7468·6569·7220·6d6f·6e69·746f···in·their·monito | ||
| 000009f0:·72 | 000009f0:·7269·6e67·2061·6e64·2069·6e76·6573·7469··ring·and·investi | ||
| 00000a00:·6 | 00000a00:·6761·7469·6f6e·2e0a·2020·2020·2020·3c2f··gation..······</ | ||
| 00000a10:·746 | 00000a10:·7464·3e0a·2020·2020·3c2f·7472·3e0a·2020··td>.····</tr>.·· | ||
| 00000a20:·2020· | 00000a20:·2020·3c74·723e·0a20·2020·2020·203c·7464····<tr>.······<td | ||
| 00000a30:·3 | 00000a30:·3e41·552d·3228·6429·3c62·722f·3e41·552d··>AU-2(d)<br/>AU- | ||
| 00000a40:· | 00000a40:·3132·2863·293c·6272·2f3e·434d·2d36·2861··12(c)<br/>CM-6(a | ||
| 00000a50:·3c | 00000a50:·293c·2f74·643e·0a20·2020·2020·203c·7464··)</td>.······<td | ||
| 00000a60:· | 00000a60:·3e52·6563·6f72·6420·556e·7375·6363·6573··>Record·Unsucces | ||
| 00000a70:· | 00000a70:·7366·756c·2050·6572·6d69·7373·696f·6e20··sful·Permission· | ||
| 00000a80:· | 00000a80:·4368·616e·6765·7320·746f·2046·696c·6573··Changes·to·Files | ||
| 00000a90:· | 00000a90:·202d·2073·6574·7861·7474·723c·2f74·643e···-·setxattr</td> | ||
| 00000aa0:· | 00000aa0:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000ab0:·6 | 00000ab0:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000ac0:·20 | 00000ac0:·2020·2020·2054·6865·2061·7564·6974·2073·······The·audit·s | ||
| 00000ad0:· | 00000ad0:·7973·7465·6d20·7368·6f75·6c64·2063·6f6c··ystem·should·col | ||
| 00000ae0:· | 00000ae0:·6c65·6374·2075·6e73·7563·6365·7373·6675··lect·unsuccessfu | ||
| 00000af0:·6c | 00000af0:·6c20·6669·6c65·2070·6572·6d69·7373·696f··l·file·permissio | ||
| 00000b00:·6 | 00000b00:·6e20·6368·616e·6765·0a61·7474·656d·7074··n·change.attempt | ||
| 00000b10:· | 00000b10:·7320·666f·7220·616c·6c20·7573·6572·7320··s·for·all·users· | ||
| 00000b20:· | 00000b20:·616e·6420·726f·6f74·2e0a·4966·2074·6865··and·root..If·the | ||
| 00000b30:· | 00000b30:·203c·7474·3e61·7564·6974·643c·2f74·743e···<tt>auditd</tt> | ||
| 00000b40:· | 00000b40:·2064·6165·6d6f·6e20·6973·2063·6f6e·6669···daemon·is·confi | ||
| 00000b50:·6 | 00000b50:·6775·7265·640a·746f·2075·7365·2074·6865··gured.to·use·the | ||
| 00000b60:·20 | 00000b60:·203c·7474·3e61·7567·656e·7275·6c65·733c···<tt>augenrules< | ||
| 00000b70:· | 00000b70:·2f74·743e·2070·726f·6772·616d·2074·6f20··/tt>·program·to· | ||
| 00000b80:·72 | 00000b80:·7265·6164·2061·7564·6974·2072·756c·6573··read·audit·rules | ||
| 00000b90:· | 00000b90:·2064·7572·696e·6720·6461·656d·6f6e·0a73···during·daemon.s | ||
| 00000ba0:· | 00000ba0:·7461·7274·7570·2028·7468·6520·6465·6661··tartup·(the·defa | ||
| 00000bb0:· | 00000bb0:·756c·7429·2c20·6164·6420·7468·6520·666f··ult),·add·the·fo | ||
| 00000bc0:·6 | 00000bc0:·6c6c·6f77·696e·6720·6c69·6e65·7320·746f··llowing·lines·to | ||
| Max diff block lines reached; 6291045/7353533 bytes (85.55%) of diff not shown. | |||
| Offset 73, 28 lines modified | Offset 73, 14 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 95 | ······<td·xml:lang="en-US"> | 81 | ······<td·xml:lang="en-US"> |
| 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 98 | GRUB2·command·line·for·the·Linux·operating·system. | 84 | GRUB2·command·line·for·the·Linux·operating·system. |
| 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 105, 14 lines modified | Offset 91, 28 lines modified | ||
| 105 | ······</td> | 91 | ······</td> |
| 106 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 108 | the·vulnerability·to·exploitation. | 94 | the·vulnerability·to·exploitation. |
| 109 | ······</td> | 95 | ······</td> |
| 110 | ····</tr> | 96 | ····</tr> |
| 111 | ····<tr> | 97 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 30 lines modified | Offset 157, 14 lines modified | ||
| 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. | 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. |
| 158 | any·packets·which·are·not·explicitly·permitted·should·not·be | 158 | any·packets·which·are·not·explicitly·permitted·should·not·be |
| 159 | accepted. | 159 | accepted. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | ||
| 165 | ······<td·xml:lang="en-US"> | ||
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | ||
| 168 | ······</td> | ||
| 169 | ······<td·xml:lang="en-US"> | ||
| 170 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | ||
| 171 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 172 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 176 | ······</td> | ||
| 177 | ····</tr> | ||
| 178 | ····<tr> | ||
| 179 | ······<td>Req-1.4.1</td> | ||
| 180 | ······<td>Install·iptables·Package</td> | 164 | ······<td>Install·iptables·Package</td> |
| 181 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| 183 | <pre> | 167 | <pre> |
| 184 | $·sudo·yum·install·iptables</pre> | 168 | $·sudo·yum·install·iptables</pre> |
| 185 | ······</td> | 169 | ······</td> |
| 186 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| Offset 202, 14 lines modified | Offset 186, 30 lines modified | ||
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | 186 | typically·critical·to·operation·of·the·system.·The·loopback·interface |
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 187 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | 188 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 205 | anti-spoofing·measure. | 189 | anti-spoofing·measure. |
| 206 | ······</td> | 190 | ······</td> |
| 207 | ····</tr> | 191 | ····</tr> |
| 208 | ····<tr> | 192 | ····<tr> |
| 193 | ······<td>Req-1.4.1</td> | ||
| 194 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | ||
| 195 | ······<td·xml:lang="en-US"> | ||
| 196 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | ||
| 197 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | ||
| 198 | ······</td> | ||
| 199 | ······<td·xml:lang="en-US"> | ||
| 200 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | ||
| 201 | system's·TCP·connection·table·with·connections·in·the·SYN_RCVD·state. | ||
| 202 | Syncookies·can·be·used·to·track·a·connection·when·a·subsequent·ACK·is·received, | ||
| 203 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | ||
| 204 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | ||
| 205 | enables·the·system·to·continue·servicing·valid·connection·requests. | ||
| 206 | ······</td> | ||
| 207 | ····</tr> | ||
| 208 | ····<tr> | ||
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 213 | transport·layer·protocol,·designed·to·support·the·idea·of | 213 | transport·layer·protocol,·designed·to·support·the·idea·of |
| 214 | message-oriented·communication,·with·several·streams·of·messages | 214 | message-oriented·communication,·with·several·streams·of·messages |
| 215 | within·one·connection. | 215 | within·one·connection. |
| Offset 274, 14 lines modified | Offset 274, 41 lines modified | ||
| 274 | <br·/> | 274 | <br·/> |
| 275 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast | 275 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast |
| 276 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. | 276 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. |
| 277 | ······</td> | 277 | ······</td> |
| 278 | ····</tr> | 278 | ····</tr> |
| 279 | ····<tr> | 279 | ····<tr> |
| 280 | ······<td>Req-1.4.3</td> | 280 | ······<td>Req-1.4.3</td> |
| Max diff block lines reached; 296102/303834 bytes (97.46%) of diff not shown. | |||
| Offset 34, 14 lines modified | Offset 34, 26 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 41 | ····················································································Routing·protocol | 53 | ····················································································Routing·protocol |
| 42 | ····················································································daemons·are | 54 | ····················································································daemons·are |
| 43 | ····················································································typically·used·on | 55 | ····················································································typically·used·on |
| 44 | ····················································································routers·to·exchange | 56 | ····················································································routers·to·exchange |
| 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 49, 26 lines modified | Offset 61, 14 lines modified | ||
| 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 50 | ·····························sysctl.d:··············································required,·system | 62 | ·····························sysctl.d:··············································required,·system |
| 51 | ·····························net.ipv4.ip_forward·=·0································network·information | 63 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 52 | ····················································································may·be | 64 | ····················································································may·be |
| 53 | ····················································································unnecessarily | 65 | ····················································································unnecessarily |
| 54 | ····················································································transmitted·across | 66 | ····················································································transmitted·across |
| 55 | ····················································································the·network. | 67 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 40 lines modified | Offset 112, 14 lines modified | ||
| 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements | 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements |
| 113 | ·····························DefaultZone=drop·······································proper·design·for·a | 113 | ·····························DefaultZone=drop·······································proper·design·for·a |
| 114 | ····················································································firewall,·i.e.·any | 114 | ····················································································firewall,·i.e.·any |
| 115 | ····················································································packets·which·are | 115 | ····················································································packets·which·are |
| 116 | ····················································································not·explicitly | 116 | ····················································································not·explicitly |
| 117 | ····················································································permitted·should | 117 | ····················································································permitted·should |
| 118 | ····················································································not·be·accepted. | 118 | ····················································································not·be·accepted. |
| 119 | ····················································································A·TCP·SYN·flood | ||
| 120 | ····················································································attack·can·cause·a | ||
| 121 | ····················································································denial·of·service | ||
| 122 | ····················································································by·filling·a | ||
| 123 | ····················································································system's·TCP | ||
| 124 | ····················································································connection·table | ||
| 125 | ····················································································with·connections·in | ||
| 126 | ····················································································the·SYN_RCVD·state. | ||
| 127 | ····················································································Syncookies·can·be | ||
| 128 | ·····························To·set·the·runtime·status·of·the·······················used·to·track·a | ||
| 129 | ·····························net.ipv4.tcp_syncookies·kernel·parameter,·run·the······connection·when·a | ||
| 130 | ·········Enable·Kernel·······following·command:·····································subsequent·ACK·is | ||
| 131 | Req-·····Parameter·to·Use····$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1·············received,·verifying | ||
| 132 | 1.4.1····TCP·Syncookies·on···To·make·sure·that·the·setting·is·persistent,·add·the···the·initiator·is | ||
| 133 | ·········Network·Interfaces··following·line·to·a·file·in·the·directory·/etc/········attempting·a·valid | ||
| 134 | ·····························sysctl.d:··············································connection·and·is | ||
| 135 | ·····························net.ipv4.tcp_syncookies·=·1····························not·a·flood·source. | ||
| 136 | ····················································································This·feature·is | ||
| 137 | ····················································································activated·when·a | ||
| 138 | ····················································································flood·condition·is | ||
| 139 | ····················································································detected,·and | ||
| 140 | ····················································································enables·the·system | ||
| 141 | ····················································································to·continue | ||
| 142 | ····················································································servicing·valid | ||
| 143 | ····················································································connection | ||
| 144 | ····················································································requests. | ||
| 145 | ····················································································iptables·controls | 119 | ····················································································iptables·controls |
| 146 | ····················································································the·Linux·kernel | 120 | ····················································································the·Linux·kernel |
| 147 | ····················································································network·packet | 121 | ····················································································network·packet |
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. |
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | 123 | 1.4.1····Package·············following·command:·····································iptables·allows |
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to |
| 151 | ····················································································set·up·firewalls | 125 | ····················································································set·up·firewalls |
| Offset 164, 14 lines modified | Offset 138, 40 lines modified | ||
| 164 | ····················································································network·traffic | 138 | ····················································································network·traffic |
| 165 | ····················································································should·be·seen,·all | 139 | ····················································································should·be·seen,·all |
| 166 | ····················································································other·interfaces | 140 | ····················································································other·interfaces |
| 167 | ····················································································should·ignore | 141 | ····················································································should·ignore |
| 168 | ····················································································traffic·on·this | 142 | ····················································································traffic·on·this |
| 169 | ····················································································network·as·an·anti- | 143 | ····················································································network·as·an·anti- |
| 170 | ····················································································spoofing·measure. | 144 | ····················································································spoofing·measure. |
| 145 | ····················································································A·TCP·SYN·flood | ||
| 146 | ····················································································attack·can·cause·a | ||
| 147 | ····················································································denial·of·service | ||
| 148 | ····················································································by·filling·a | ||
| 149 | ····················································································system's·TCP | ||
| 150 | ····················································································connection·table | ||
| 151 | ····················································································with·connections·in | ||
| 152 | ····················································································the·SYN_RCVD·state. | ||
| 153 | ····················································································Syncookies·can·be | ||
| 154 | ·····························To·set·the·runtime·status·of·the·······················used·to·track·a | ||
| 155 | ·····························net.ipv4.tcp_syncookies·kernel·parameter,·run·the······connection·when·a | ||
| 156 | ·········Enable·Kernel·······following·command:·····································subsequent·ACK·is | ||
| 157 | Req-·····Parameter·to·Use····$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1·············received,·verifying | ||
| 158 | 1.4.1····TCP·Syncookies·on···To·make·sure·that·the·setting·is·persistent,·add·the···the·initiator·is | ||
| 159 | ·········Network·Interfaces··following·line·to·a·file·in·the·directory·/etc/········attempting·a·valid | ||
| 160 | ·····························sysctl.d:··············································connection·and·is | ||
| 161 | ·····························net.ipv4.tcp_syncookies·=·1····························not·a·flood·source. | ||
| 162 | ····················································································This·feature·is | ||
| 163 | ····················································································activated·when·a | ||
| 164 | ····················································································flood·condition·is | ||
| 165 | ····················································································detected,·and | ||
| 166 | ····················································································enables·the·system | ||
| 167 | ····················································································to·continue | ||
| 168 | ····················································································servicing·valid | ||
| 169 | ····················································································connection | ||
| Max diff block lines reached; 495457/508092 bytes (97.51%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="202 | 3 | ··<xccdf-1.2:version·time="2025-12-10T10:55:27.625017+00:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R14. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R14. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this |
| 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:amazon_linux:2023"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:amazon_linux:2023"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Linux·2023</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Linux·2023</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml">oval:ssg-installed_OS_is_al2023:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml">oval:ssg-installed_OS_is_al2023:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of | 40 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 105, 163 lines modified | Offset 105, 163 lines modified | ||
| 105 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 110 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 110 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 111 | ······<cpe-lang:platform-specification> | 111 | ······<cpe-lang:platform-specification> |
| 112 | ········<cpe-lang:platform·id="package_d | 112 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 113 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 114 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_d | 114 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 115 | ··········</cpe-lang:logical-test> | ||
| 116 | ········</cpe-lang:platform> | ||
| 117 | ········<cpe-lang:platform·id="machine"> | ||
| 118 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 119 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 120 | ··········</cpe-lang:logical-test> | ||
| 121 | ········</cpe-lang:platform> | ||
| 122 | ········<cpe-lang:platform·id="machine_and_mount_home"> | ||
| 123 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> | ||
| 115 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 116 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 117 | ········<cpe-lang:platform·id="machine_and_mount_var-log"> | 128 | ········<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 118 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 119 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 120 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> |
| 121 | ··········</cpe-lang:logical-test> | 132 | ··········</cpe-lang:logical-test> |
| 122 | ········</cpe-lang:platform> | 133 | ········</cpe-lang:platform> |
| 123 | ········<cpe-lang:platform·id=" | 134 | ········<cpe-lang:platform·id="package_sudo"> |
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 127 | ··········</cpe-lang:logical-test> | 137 | ··········</cpe-lang:logical-test> |
| 128 | ········</cpe-lang:platform> | 138 | ········</cpe-lang:platform> |
| 129 | ········<cpe-lang:platform·id="g | 139 | ········<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 142 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> | ||
| 132 | ··········</cpe-lang:logical-test> | 143 | ··········</cpe-lang:logical-test> |
| 133 | ········</cpe-lang:platform> | 144 | ········</cpe-lang:platform> |
| 134 | ········<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> | 145 | ········<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> |
| 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 137 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> | 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> |
| 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 139 | ··········</cpe-lang:logical-test> | 150 | ··········</cpe-lang:logical-test> |
| 140 | ········</cpe-lang:platform> | 151 | ········</cpe-lang:platform> |
| 141 | ········<cpe-lang:platform·id="not_aarch64_arch | 152 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ·········· | 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 144 | ············ | 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 145 | ············</cpe-lang:logical-test> | ||
| 146 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 147 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 148 | ············</cpe-lang:logical-test> | ||
| 149 | ··········</cpe-lang:logical-test> | 155 | ··········</cpe-lang:logical-test> |
| 150 | ········</cpe-lang:platform> | 156 | ········</cpe-lang:platform> |
| 151 | ········<cpe-lang:platform·id="package_ | 157 | ········<cpe-lang:platform·id="package_nftables"> |
| 152 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 154 | ··········</cpe-lang:logical-test> | 160 | ··········</cpe-lang:logical-test> |
| 155 | ········</cpe-lang:platform> | 161 | ········</cpe-lang:platform> |
| 156 | ········<cpe-lang:platform·id=" | 162 | ········<cpe-lang:platform·id="package_firewalld"> |
| 157 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 159 | ··········</cpe-lang:logical-test> | 165 | ··········</cpe-lang:logical-test> |
| 160 | ········</cpe-lang:platform> | 166 | ········</cpe-lang:platform> |
| 161 | ········<cpe-lang:platform·id=" | 167 | ········<cpe-lang:platform·id="package_systemd"> |
| 162 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 164 | ··········</cpe-lang:logical-test> | 170 | ··········</cpe-lang:logical-test> |
| 165 | ········</cpe-lang:platform> | 171 | ········</cpe-lang:platform> |
| 166 | ········<cpe-lang:platform·id="package_p | 172 | ········<cpe-lang:platform·id="package_postfix"> |
| 167 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_p | 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 169 | ··········</cpe-lang:logical-test> | 175 | ··········</cpe-lang:logical-test> |
| 170 | ········</cpe-lang:platform> | 176 | ········</cpe-lang:platform> |
| 171 | ········<cpe-lang:platform·id=" | 177 | ········<cpe-lang:platform·id="non-uefi"> |
| 172 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> | ||
| 175 | ··········</cpe-lang:logical-test> | 180 | ··········</cpe-lang:logical-test> |
| 176 | ········</cpe-lang:platform> | 181 | ········</cpe-lang:platform> |
| 177 | ········<cpe-lang:platform·id=" | 182 | ········<cpe-lang:platform·id="grub2"> |
| 178 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 183 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 180 | ··········</cpe-lang:logical-test> | 185 | ··········</cpe-lang:logical-test> |
| 181 | ········</cpe-lang:platform> | 186 | ········</cpe-lang:platform> |
| 182 | ········<cpe-lang:platform·id=" | 187 | ········<cpe-lang:platform·id="machine_and_mount_var-tmp"> |
| 183 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 188 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 190 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 185 | ··········</cpe-lang:logical-test> | 191 | ··········</cpe-lang:logical-test> |
| 186 | ········</cpe-lang:platform> | 192 | ········</cpe-lang:platform> |
| 187 | ········<cpe-lang:platform·id="package_ | 193 | ········<cpe-lang:platform·id="package_rsh-server"> |
| 188 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 194 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 195 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 190 | ··········</cpe-lang:logical-test> | 196 | ··········</cpe-lang:logical-test> |
| 191 | ········</cpe-lang:platform> | 197 | ········</cpe-lang:platform> |
| 192 | ········<cpe-lang:platform·id="package_ | 198 | ········<cpe-lang:platform·id="package_chrony"> |
| Max diff block lines reached; 1607476/1621280 bytes (99.15%) of diff not shown. | |||
| Offset 3, 2535 lines modified | Offset 3, 2535 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-a | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_openat_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·openat</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-a | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_openat_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_grub2_cfg_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_shadow_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/shadow</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_shadow_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pam_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Enable·PAM</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pam_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-aide_build_database_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_logindefs_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Set·Password·Hashing·Algorithm·in·/etc/login.defs</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-a | 31 | ········<ocil:test_action_ref>ocil:ssg-set_password_hashing_algorithm_logindefs_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_audit_binaries_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify·that·audit·tools·Have·Mode·0755·or·less</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_audit_binaries_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_gshadow_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmod_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchmod</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchmod_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_group_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Verify·User·Who·Owns·Backup·group·File</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fremovexattr_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_keepalive_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Set·SSH·Client·Alive·Count·Max</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_keepalive_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_shadow_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Verify·Permissions·on·shadow·File</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_cramfs_disabled_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_user_interactive_home_directory_exists_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>All·Interactive·Users·Home·Directories·Must·Exist</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_user_interactive_home_directory_exists_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_adjtimex_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Record·attempts·to·alter·time·through·adjtimex</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_adjtimex_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-no_files_unowned_by_user_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-grub2_audit_argument_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Enable·Auditing·for·Processes·Which·Start·Prior·to·the·Audit·Daemon</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-grub2_audit_argument_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-aide_check_audit_tools_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Configure·AIDE·to·Verify·the·Audit·Tools</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-aide_check_audit_tools_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_media_export_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Exporting·to·Media·(successful)</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_media_export_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-a | 94 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_admin_space_left_action_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Configure·auditd·admin_space_left·Action·on·Low·Disk·Space</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-a | 97 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_admin_space_left_action_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_hourly_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Configure·Kernel·Parameter·for·Accepting·Secure·Redirects·By·Default</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_permission_user_init_files_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Ensure·All·User·Initialization·Files·Have·Mode·0740·Or·Less·Permissive</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-file_ | 109 | ········<ocil:test_action_ref>ocil:ssg-file_permission_user_init_files_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_shadow_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-socket_systemd-journal-remote_disabled_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable·systemd-journal-remote·Socket</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-socket_systemd-journal-remote_disabled_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-package_dhcp_removed_ocil:questionnaire:1"> | ||
| 119 | ····· | 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_networkconfig_modification_network_scripts_ocil:questionnaire:1"> |
| Max diff block lines reached; 730232/742608 bytes (98.33%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of | 7 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 163 lines modified | Offset 72, 163 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_d | 79 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_d | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="machine"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="machine_and_mount_home"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> | 95 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> |
| 88 | ······</cpe-lang:logical-test> | 99 | ······</cpe-lang:logical-test> |
| 89 | ····</cpe-lang:platform> | 100 | ····</cpe-lang:platform> |
| 90 | ····<cpe-lang:platform·id=" | 101 | ····<cpe-lang:platform·id="package_sudo"> |
| 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 94 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 95 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 96 | ····<cpe-lang:platform·id="g | 106 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 97 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> | ||
| 99 | ······</cpe-lang:logical-test> | 110 | ······</cpe-lang:logical-test> |
| 100 | ····</cpe-lang:platform> | 111 | ····</cpe-lang:platform> |
| 101 | ····<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> | 112 | ····<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> |
| 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> | 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="not_aarch64_arch | 119 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ······ | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 111 | ········ | 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 112 | ········</cpe-lang:logical-test> | ||
| 113 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 114 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 115 | ········</cpe-lang:logical-test> | ||
| 116 | ······</cpe-lang:logical-test> | 122 | ······</cpe-lang:logical-test> |
| 117 | ····</cpe-lang:platform> | 123 | ····</cpe-lang:platform> |
| 118 | ····<cpe-lang:platform·id="package_ | 124 | ····<cpe-lang:platform·id="package_nftables"> |
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 121 | ······</cpe-lang:logical-test> | 127 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 128 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id=" | 129 | ····<cpe-lang:platform·id="package_firewalld"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 126 | ······</cpe-lang:logical-test> | 132 | ······</cpe-lang:logical-test> |
| 127 | ····</cpe-lang:platform> | 133 | ····</cpe-lang:platform> |
| 128 | ····<cpe-lang:platform·id=" | 134 | ····<cpe-lang:platform·id="package_systemd"> |
| 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 131 | ······</cpe-lang:logical-test> | 137 | ······</cpe-lang:logical-test> |
| 132 | ····</cpe-lang:platform> | 138 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id="package_p | 139 | ····<cpe-lang:platform·id="package_postfix"> |
| 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_p | 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 136 | ······</cpe-lang:logical-test> | 142 | ······</cpe-lang:logical-test> |
| 137 | ····</cpe-lang:platform> | 143 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id=" | 144 | ····<cpe-lang:platform·id="non-uefi"> |
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> | ||
| 142 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id=" | 149 | ····<cpe-lang:platform·id="grub2"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 147 | ······</cpe-lang:logical-test> | 152 | ······</cpe-lang:logical-test> |
| 148 | ····</cpe-lang:platform> | 153 | ····</cpe-lang:platform> |
| 149 | ····<cpe-lang:platform·id=" | 154 | ····<cpe-lang:platform·id="machine_and_mount_var-tmp"> |
| 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 152 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 153 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 154 | ····<cpe-lang:platform·id="package_ | 160 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 157 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 158 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 159 | ····<cpe-lang:platform·id="package_ | 165 | ····<cpe-lang:platform·id="package_chrony"> |
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 162 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 163 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id=" | 170 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 173 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 174 | ········</cpe-lang:logical-test> | ||
| 175 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 176 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 167 | ········<cpe-lang | 177 | ········</cpe-lang:logical-test> |
| 168 | ······</cpe-lang:logical-test> | 178 | ······</cpe-lang:logical-test> |
| 169 | ····</cpe-lang:platform> | 179 | ····</cpe-lang:platform> |
| 170 | ····<cpe-lang:platform·id="package_ | 180 | ····<cpe-lang:platform·id="package_audit"> |
| Max diff block lines reached; 769669/783514 bytes (98.23%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux2-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux2-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:alinux:alibaba_cloud_linux:2"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:alinux:alibaba_cloud_linux:2"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Alibaba·Cloud·Linux·2</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Alibaba·Cloud·Linux·2</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml">oval:ssg-installed_OS_is_alinux2:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml">oval:ssg-installed_OS_is_alinux2:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux2-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux2-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of | 40 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 104, 198 lines modified | Offset 104, 198 lines modified | ||
| 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 110 | ······<cpe-lang:platform-specification> | 110 | ······<cpe-lang:platform-specification> |
| 111 | ········<cpe-lang:platform·id="package_logrotate"> | ||
| 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | ||
| 114 | ··········</cpe-lang:logical-test> | ||
| 115 | ········</cpe-lang:platform> | ||
| 116 | ········<cpe-lang:platform·id="package_ | 111 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 119 | ··········</cpe-lang:logical-test> | 114 | ··········</cpe-lang:logical-test> |
| 120 | ········</cpe-lang:platform> | 115 | ········</cpe-lang:platform> |
| 121 | ········<cpe-lang:platform·id=" | 116 | ········<cpe-lang:platform·id="package_ntp"> |
| 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 125 | ··········</cpe-lang:logical-test> | 119 | ··········</cpe-lang:logical-test> |
| 126 | ········</cpe-lang:platform> | 120 | ········</cpe-lang:platform> |
| 127 | ········<cpe-lang:platform·id=" | 121 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 128 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 130 | ··········</cpe-lang:logical-test> | 124 | ··········</cpe-lang:logical-test> |
| 131 | ········</cpe-lang:platform> | 125 | ········</cpe-lang:platform> |
| 132 | ········<cpe-lang:platform·id=" | 126 | ········<cpe-lang:platform·id="machine"> |
| 133 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 135 | ··········</cpe-lang:logical-test> | 129 | ··········</cpe-lang:logical-test> |
| 136 | ········</cpe-lang:platform> | 130 | ········</cpe-lang:platform> |
| 137 | ········<cpe-lang:platform·id=" | 131 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 138 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 140 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 141 | ············</cpe-lang:logical-test> | ||
| 142 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ············ | 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 144 | ············</cpe-lang:logical-test> | ||
| 145 | ··········</cpe-lang:logical-test> | 134 | ··········</cpe-lang:logical-test> |
| 146 | ········</cpe-lang:platform> | 135 | ········</cpe-lang:platform> |
| 147 | ········<cpe-lang:platform·id=" | 136 | ········<cpe-lang:platform·id="package_logrotate"> |
| 148 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 150 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 151 | ············</cpe-lang:logical-test> | ||
| 152 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 153 | ············ | 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 154 | ············</cpe-lang:logical-test> | ||
| 155 | ··········</cpe-lang:logical-test> | 139 | ··········</cpe-lang:logical-test> |
| 156 | ········</cpe-lang:platform> | 140 | ········</cpe-lang:platform> |
| 157 | ········<cpe-lang:platform·id="package_ | 141 | ········<cpe-lang:platform·id="package_sudo"> |
| 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 160 | ··········</cpe-lang:logical-test> | 144 | ··········</cpe-lang:logical-test> |
| 161 | ········</cpe-lang:platform> | 145 | ········</cpe-lang:platform> |
| 162 | ········<cpe-lang:platform·id=" | 146 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 165 | ··········</cpe-lang:logical-test> | 150 | ··········</cpe-lang:logical-test> |
| 166 | ········</cpe-lang:platform> | 151 | ········</cpe-lang:platform> |
| 167 | ········<cpe-lang:platform·id=" | 152 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 168 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 170 | ··········</cpe-lang:logical-test> | 155 | ··········</cpe-lang:logical-test> |
| 171 | ········</cpe-lang:platform> | 156 | ········</cpe-lang:platform> |
| 172 | ········<cpe-lang:platform·id=" | 157 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 160 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 161 | ············</cpe-lang:logical-test> | ||
| 162 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 163 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 164 | ············</cpe-lang:logical-test> | ||
| 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 176 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 177 | ··········</cpe-lang:logical-test> | 166 | ··········</cpe-lang:logical-test> |
| 178 | ········</cpe-lang:platform> | 167 | ········</cpe-lang:platform> |
| 179 | ········<cpe-lang:platform·id="package_ | 168 | ········<cpe-lang:platform·id="package_yum"> |
| 180 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 182 | ··········</cpe-lang:logical-test> | 171 | ··········</cpe-lang:logical-test> |
| 183 | ········</cpe-lang:platform> | 172 | ········</cpe-lang:platform> |
| 184 | ········<cpe-lang:platform·id=" | 173 | ········<cpe-lang:platform·id="package_firewalld"> |
| 185 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 174 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 187 | ··········</cpe-lang:logical-test> | 176 | ··········</cpe-lang:logical-test> |
| 188 | ········</cpe-lang:platform> | 177 | ········</cpe-lang:platform> |
| 189 | ········<cpe-lang:platform·id=" | 178 | ········<cpe-lang:platform·id="package_systemd"> |
| 190 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 179 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 192 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 193 | ··········</cpe-lang:logical-test> | 181 | ··········</cpe-lang:logical-test> |
| 194 | ········</cpe-lang:platform> | 182 | ········</cpe-lang:platform> |
| 195 | ········<cpe-lang:platform·id=" | 183 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 196 | ··········<cpe-lang:logical-test·operator=" | 184 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| Max diff block lines reached; 1480059/1494308 bytes (99.05%) of diff not shown. | |||
| Offset 3, 6378 lines modified | Offset 3, 6608 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-grub2_mce_argument_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Force·kernel·panic·on·uncorrected·MCEs</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-grub2_mce_argument_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_credentials_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Enable· | 11 | ······<ocil:title>Enable·checks·on·credential·management</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_credentials_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_randomize_va_space_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Enable·Randomized·Layout·of·Virtual·Address·Space</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_randomize_va_space_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_strictmodes_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Enable·Use·of·Strict·Mode·Checking</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_strictmodes_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_panic_on_oops_ocil:questionnaire:1"> | ||
| 35 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_systemauth_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Set·PAM''s·Password·Hashing·Algorithm</ocil:title> | ||
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-set_password_hashing_algorithm_systemauth_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-grub2_spec_store_bypass_disable_argument_ocil:questionnaire:1"> | ||
| 41 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_at_allow_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify·Group·Who·Owns·/etc/at.allow·file</ocil:title> | ||
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_at_allow_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-package_bind_removed_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 41 | ······<ocil:title>Uninstall·bind·Package</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-package_bind_removed_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_fs_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Disable·kernel·debugfs</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_fs_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-service_abrtd_disabled_ocil:questionnaire:1"> | ||
| 59 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_pwhistory_remember_system_auth_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Limit·Password·Reuse:·system-auth</ocil:title> | ||
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_pwhistory_remember_system_auth_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-grub2_enable_selinux_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·SELinux·Not·Disabled·in·/etc/default/grub</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-grub2_enable_selinux_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_binary_dirs_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify· | 65 | ······<ocil:title>Verify·that·System·Executable·Directories·Have·Restrictive·Permissions</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-dir_permissions_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rmdir_ocil:questionnaire:1"> | ||
| 77 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure·all·users·last·password·change·date·is·in·the·past</ocil:title> | ||
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-a | 73 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_last_change_is_in_past_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-package_openssh-server_removed_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Remove·the·OpenSSH·Server·Package</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-package_openssh-server_removed_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_run_as_chrony_user_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·that·chronyd·is·running·under·chrony·user·account</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-chronyd_run_as_chrony_user_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_key_ocil:questionnaire:1"> | ||
| 95 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_login_events_lastlog_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Record·Attempts·to·Alter·Logon·and·Logout·Events·-·lastlog</ocil:title> | ||
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_login_events_lastlog_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_allow_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>Verify·User·Who·Owns·/etc/cron.allow·file</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_suid_dumpable_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Disable·Core·Dumps·for·SUID·programs</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_suid_dumpable_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-harden_ssh_client_crypto_policy_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 107 | ······<ocil:title>Harden·SSH·client·Crypto·Policy</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-harden_ssh_client_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_postmaster_ocil:questionnaire:1"> | ||
| 119 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-package_chrony_installed_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>The·Chrony·package·is·installed</ocil:title> | ||
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-p | 115 | ········<ocil:test_action_ref>ocil:ssg-package_chrony_installed_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| Max diff block lines reached; 867830/880164 bytes (98.60%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of | 7 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 198 lines modified | Offset 71, 198 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_logrotate"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="package_ntp"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 88 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="machine"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 108 | ········</cpe-lang:logical-test> | ||
| 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 110 | ········ | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 111 | ········</cpe-lang:logical-test> | ||
| 112 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 103 | ····<cpe-lang:platform·id="package_logrotate"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 118 | ········</cpe-lang:logical-test> | ||
| 119 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 120 | ········ | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 121 | ········</cpe-lang:logical-test> | ||
| 122 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="package_ | 108 | ····<cpe-lang:platform·id="package_sudo"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 111 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 112 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 113 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id=" | 119 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 122 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 123 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 124 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 127 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 128 | ········</cpe-lang:logical-test> | ||
| 129 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 130 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 131 | ········</cpe-lang:logical-test> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 144 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="package_ | 135 | ····<cpe-lang:platform·id="package_yum"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="package_firewalld"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="package_systemd"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 150 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 163 | ······<cpe-lang:logical-test·operator=" | 151 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 165 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="package_ | 156 | ····<cpe-lang:platform·id="package_gdm"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="package_ | 161 | ····<cpe-lang:platform·id="package_postfix"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 164 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 165 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id=" | 166 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 168 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| Max diff block lines reached; 545784/560395 bytes (97.39%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:alinux:alibaba_cloud_linux:3"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:alinux:alibaba_cloud_linux:3"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Alibaba·Cloud·Linux·3</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Alibaba·Cloud·Linux·3</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml">oval:ssg-installed_OS_is_alinux3:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml">oval:ssg-installed_OS_is_alinux3:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of | 40 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 104, 186 lines modified | Offset 104, 186 lines modified | ||
| 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 110 | ······<cpe-lang:platform-specification> | 110 | ······<cpe-lang:platform-specification> |
| 111 | ········<cpe-lang:platform·id="package_ | 111 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 114 | ··········</cpe-lang:logical-test> | 114 | ··········</cpe-lang:logical-test> |
| 115 | ········</cpe-lang:platform> | 115 | ········</cpe-lang:platform> |
| 116 | ········<cpe-lang:platform·id=" | 116 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 119 | ··········</cpe-lang:logical-test> | 119 | ··········</cpe-lang:logical-test> |
| 120 | ········</cpe-lang:platform> | 120 | ········</cpe-lang:platform> |
| 121 | ········<cpe-lang:platform·id="machine | 121 | ········<cpe-lang:platform·id="machine"> |
| 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 125 | ··········</cpe-lang:logical-test> | 124 | ··········</cpe-lang:logical-test> |
| 126 | ········</cpe-lang:platform> | 125 | ········</cpe-lang:platform> |
| 127 | ········<cpe-lang:platform·id=" | 126 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 128 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 130 | ··········</cpe-lang:logical-test> | 129 | ··········</cpe-lang:logical-test> |
| 131 | ········</cpe-lang:platform> | 130 | ········</cpe-lang:platform> |
| 132 | ········<cpe-lang:platform·id="gr | 131 | ········<cpe-lang:platform·id="package_logrotate"> |
| 133 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 135 | ··········</cpe-lang:logical-test> | 134 | ··········</cpe-lang:logical-test> |
| 136 | ········</cpe-lang:platform> | 135 | ········</cpe-lang:platform> |
| 137 | ········<cpe-lang:platform·id=" | 136 | ········<cpe-lang:platform·id="package_sudo"> |
| 138 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 140 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 141 | ············</cpe-lang:logical-test> | ||
| 142 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ············ | 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 144 | ············</cpe-lang:logical-test> | ||
| 145 | ··········</cpe-lang:logical-test> | 139 | ··········</cpe-lang:logical-test> |
| 146 | ········</cpe-lang:platform> | 140 | ········</cpe-lang:platform> |
| 147 | ········<cpe-lang:platform·id=" | 141 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 148 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 150 | ············ | 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 151 | ············</cpe-lang:logical-test> | ||
| 152 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 153 | ············ | 144 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 154 | ············</cpe-lang:logical-test> | ||
| 155 | ··········</cpe-lang:logical-test> | 145 | ··········</cpe-lang:logical-test> |
| 156 | ········</cpe-lang:platform> | 146 | ········</cpe-lang:platform> |
| 157 | ········<cpe-lang:platform·id=" | 147 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 158 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 148 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 160 | ··········</cpe-lang:logical-test> | 150 | ··········</cpe-lang:logical-test> |
| 161 | ········</cpe-lang:platform> | 151 | ········</cpe-lang:platform> |
| 162 | ········<cpe-lang:platform·id="package_ | 152 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 155 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 156 | ············</cpe-lang:logical-test> | ||
| 157 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 158 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 159 | ············</cpe-lang:logical-test> | ||
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 165 | ··········</cpe-lang:logical-test> | 161 | ··········</cpe-lang:logical-test> |
| 166 | ········</cpe-lang:platform> | 162 | ········</cpe-lang:platform> |
| 167 | ········<cpe-lang:platform·id=" | 163 | ········<cpe-lang:platform·id="package_yum"> |
| 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 170 | ··········</cpe-lang:logical-test> | 166 | ··········</cpe-lang:logical-test> |
| 171 | ········</cpe-lang:platform> | 167 | ········</cpe-lang:platform> |
| 172 | ········<cpe-lang:platform·id=" | 168 | ········<cpe-lang:platform·id="package_firewalld"> |
| 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 175 | ··········</cpe-lang:logical-test> | 171 | ··········</cpe-lang:logical-test> |
| 176 | ········</cpe-lang:platform> | 172 | ········</cpe-lang:platform> |
| 177 | ········<cpe-lang:platform·id=" | 173 | ········<cpe-lang:platform·id="package_systemd"> |
| 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 182 | ··········</cpe-lang:logical-test> | 176 | ··········</cpe-lang:logical-test> |
| 183 | ········</cpe-lang:platform> | 177 | ········</cpe-lang:platform> |
| 184 | ········<cpe-lang:platform·id=" | 178 | ········<cpe-lang:platform·id="wifi-iface"> |
| 185 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 179 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 187 | ··········</cpe-lang:logical-test> | 181 | ··········</cpe-lang:logical-test> |
| 188 | ········</cpe-lang:platform> | 182 | ········</cpe-lang:platform> |
| 189 | ········<cpe-lang:platform·id=" | 183 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 190 | ··········<cpe-lang:logical-test·operator=" | 184 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 192 | ··········</cpe-lang:logical-test> | 187 | ··········</cpe-lang:logical-test> |
| 193 | ········</cpe-lang:platform> | 188 | ········</cpe-lang:platform> |
| 194 | ········<cpe-lang:platform·id=" | 189 | ········<cpe-lang:platform·id="package_gdm"> |
| 195 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 190 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| Max diff block lines reached; 1446338/1460553 bytes (99.03%) of diff not shown. | |||
| Offset 3, 2787 lines modified | Offset 3, 2787 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-sudo_custom_logfile_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·Sudo·Logfile·Exists·-·sudo·logfile</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-sudo_custom_logfile_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_key_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Specify·module·signing·key·to·use</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_key_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-service_oddjobd_disabled_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Disable·Odd·Job·Daemon·(oddjobd)</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-service_oddjobd_disabled_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_run_as_chrony_user_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·that·chronyd·is·running·under·chrony·user·account</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-chronyd_run_as_chrony_user_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_full_action_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Configure·auditd·Disk·Full·Action·when·Disk·Space·Is·Full</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_disk_full_action_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_syslog_plugin_activated_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Configure·auditd·to·use·audispd's·syslog·plugin</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-auditd_audispd_syslog_plugin_activated_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_warn_age_login_defs_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Set·Password·Warning·Age</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_ | 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_warn_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-disable_host_auth_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Disable·Host-Based·Authentication</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-disable_host_auth_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-security_patches_up_to_date_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure· | 59 | ······<ocil:title>Ensure·Software·Patches·Installed</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-security_patches_up_to_date_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-configure_user_data_backups_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-no_shelllogin_for_systemaccounts_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·that·System·Accounts·Do·Not·Run·a·Shell·Upon·Login</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-no_shelllogin_for_systemaccounts_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_syslog_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Verify·Group·Who·Owns·/var/log/syslog·File</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_syslog_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-fi | 76 | ····<ocil:questionnaire·id="ocil:ssg-configure_kerberos_crypto_policy_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Configure·Kerberos·to·use·System·Crypto·Policy</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-fi | 79 | ········<ocil:test_action_ref>ocil:ssg-configure_kerberos_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-service_sshd_disabled_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Disable·SSH·Server·If·Possible</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-service_sshd_disabled_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_systemauth_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-configure_ssh_crypto_policy_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Configure·SSH·to·use·System·Crypto·Policy</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-configure_ssh_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_immutable_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Make·the·auditd·Configuration·Immutable</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_immutable_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_list_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure·Rsyslog·Encrypts·Off-Loaded·Audit·Records</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_dccp_disabled_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable· | 107 | ······<ocil:title>Disable·DCCP·Support</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_dccp_disabled_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_ip_forward_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_ip_forward_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_run_as_chrony_user_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_groupownership_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure·Log·Files·Are·Owned·By·Appropriate·Group</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_groupownership_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_grub2_cfg_ocil:questionnaire:1"> |
| Max diff block lines reached; 866325/878852 bytes (98.57%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of | 7 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 186 lines modified | Offset 71, 186 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="machine | 88 | ····<cpe-lang:platform·id="machine"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="gr | 98 | ····<cpe-lang:platform·id="package_logrotate"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 103 | ····<cpe-lang:platform·id="package_sudo"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 108 | ········</cpe-lang:logical-test> | ||
| 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 110 | ········ | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 111 | ········</cpe-lang:logical-test> | ||
| 112 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 108 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 117 | ········ | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 118 | ········</cpe-lang:logical-test> | ||
| 119 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 120 | ········ | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 121 | ········</cpe-lang:logical-test> | ||
| 122 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 114 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id="package_ | 119 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 123 | ········</cpe-lang:logical-test> | ||
| 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 126 | ········</cpe-lang:logical-test> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 132 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="package_yum"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 135 | ····<cpe-lang:platform·id="package_firewalld"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 142 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="package_systemd"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="wifi-iface"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 150 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 157 | ······<cpe-lang:logical-test·operator=" | 151 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 159 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id=" | 156 | ····<cpe-lang:platform·id="package_gdm"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="package_ | 161 | ····<cpe-lang:platform·id="package_postfix"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 164 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 165 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id=" | 166 | ····<cpe-lang:platform·id="non-uefi"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 169 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 170 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id=" | 171 | ····<cpe-lang:platform·id="grub2"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| Max diff block lines reached; 514974/529707 bytes (97.22%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis23-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis23-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis23-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis23-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis23-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis23-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis23-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis23-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis23-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis23-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis23-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis23-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-anolis23-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-anolis23-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:anolis:anolis_os:23"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:anolis:anolis_os:23"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Anolis·OS·23</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Anolis·OS·23</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml">oval:ssg-installed_OS_is_anolis23:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml">oval:ssg-installed_OS_is_anolis23:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-anolis23-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-anolis23-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of | 40 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 104, 216 lines modified | Offset 104, 216 lines modified | ||
| 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 110 | ······<cpe-lang:platform-specification> | 110 | ······<cpe-lang:platform-specification> |
| 111 | ········<cpe-lang:platform·id="package_ | 111 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 114 | ··········</cpe-lang:logical-test> | 114 | ··········</cpe-lang:logical-test> |
| 115 | ········</cpe-lang:platform> | 115 | ········</cpe-lang:platform> |
| 116 | ········<cpe-lang:platform·id=" | 116 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 119 | ··········</cpe-lang:logical-test> | 119 | ··········</cpe-lang:logical-test> |
| 120 | ········</cpe-lang:platform> | 120 | ········</cpe-lang:platform> |
| 121 | ········<cpe-lang:platform·id="machine | 121 | ········<cpe-lang:platform·id="machine"> |
| 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 125 | ··········</cpe-lang:logical-test> | 124 | ··········</cpe-lang:logical-test> |
| 126 | ········</cpe-lang:platform> | 125 | ········</cpe-lang:platform> |
| 127 | ········<cpe-lang:platform·id=" | 126 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 128 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 130 | ··········</cpe-lang:logical-test> | 129 | ··········</cpe-lang:logical-test> |
| 131 | ········</cpe-lang:platform> | 130 | ········</cpe-lang:platform> |
| 132 | ········<cpe-lang:platform·id=" | 131 | ········<cpe-lang:platform·id="package_logrotate"> |
| 133 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 135 | ··········</cpe-lang:logical-test> | 134 | ··········</cpe-lang:logical-test> |
| 136 | ········</cpe-lang:platform> | 135 | ········</cpe-lang:platform> |
| 137 | ········<cpe-lang:platform·id="g | 136 | ········<cpe-lang:platform·id="package_sudo"> |
| 138 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 140 | ··········</cpe-lang:logical-test> | 139 | ··········</cpe-lang:logical-test> |
| 141 | ········</cpe-lang:platform> | 140 | ········</cpe-lang:platform> |
| 142 | ········<cpe-lang:platform·id=" | 141 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 143 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 145 | ············ | 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 146 | ············</cpe-lang:logical-test> | ||
| 147 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 148 | ············ | 144 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 149 | ············</cpe-lang:logical-test> | ||
| 150 | ··········</cpe-lang:logical-test> | 145 | ··········</cpe-lang:logical-test> |
| 151 | ········</cpe-lang:platform> | 146 | ········</cpe-lang:platform> |
| 152 | ········<cpe-lang:platform·id="not_aarch64_arch | 147 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 148 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 150 | ··········</cpe-lang:logical-test> | ||
| 151 | ········</cpe-lang:platform> | ||
| 152 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 154 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 155 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 155 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 156 | ············</cpe-lang:logical-test> | 156 | ············</cpe-lang:logical-test> |
| 157 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 157 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 158 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 158 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 159 | ············</cpe-lang:logical-test> | 159 | ············</cpe-lang:logical-test> |
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 160 | ··········</cpe-lang:logical-test> | 161 | ··········</cpe-lang:logical-test> |
| 161 | ········</cpe-lang:platform> | 162 | ········</cpe-lang:platform> |
| 162 | ········<cpe-lang:platform·id=" | 163 | ········<cpe-lang:platform·id="package_yum"> |
| 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 165 | ··········</cpe-lang:logical-test> | 166 | ··········</cpe-lang:logical-test> |
| 166 | ········</cpe-lang:platform> | 167 | ········</cpe-lang:platform> |
| 167 | ········<cpe-lang:platform·id="package_ | 168 | ········<cpe-lang:platform·id="package_firewalld"> |
| 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 170 | ··········</cpe-lang:logical-test> | 171 | ··········</cpe-lang:logical-test> |
| 171 | ········</cpe-lang:platform> | 172 | ········</cpe-lang:platform> |
| 172 | ········<cpe-lang:platform·id=" | 173 | ········<cpe-lang:platform·id="package_systemd"> |
| 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 175 | ··········</cpe-lang:logical-test> | 176 | ··········</cpe-lang:logical-test> |
| 176 | ········</cpe-lang:platform> | 177 | ········</cpe-lang:platform> |
| 177 | ········<cpe-lang:platform·id=" | 178 | ········<cpe-lang:platform·id="wifi-iface"> |
| 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 179 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 180 | ··········</cpe-lang:logical-test> | 181 | ··········</cpe-lang:logical-test> |
| 181 | ········</cpe-lang:platform> | 182 | ········</cpe-lang:platform> |
| 182 | ········<cpe-lang:platform·id="machine_and_package_ | 183 | ········<cpe-lang:platform·id="machine_and_package_squid"> |
| 183 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 184 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_squid:def:1"/> |
| 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 187 | ··········</cpe-lang:logical-test> | 187 | ··········</cpe-lang:logical-test> |
| 188 | ········</cpe-lang:platform> | 188 | ········</cpe-lang:platform> |
| 189 | ········<cpe-lang:platform·id=" | 189 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 190 | ··········<cpe-lang:logical-test·operator=" | 190 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 192 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 192 | ··········</cpe-lang:logical-test> | 193 | ··········</cpe-lang:logical-test> |
| 193 | ········</cpe-lang:platform> | 194 | ········</cpe-lang:platform> |
| 194 | ········<cpe-lang:platform·id=" | 195 | ········<cpe-lang:platform·id="package_gdm"> |
| 195 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 196 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| Max diff block lines reached; 1697370/1711864 bytes (99.15%) of diff not shown. | |||
| Offset 3, 3509 lines modified | Offset 3, 3509 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-s | 10 | ····<ocil:questionnaire·id="ocil:ssg-sudo_custom_logfile_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·Sudo·Logfile·Exists·-·sudo·logfile</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-s | 13 | ········<ocil:test_action_ref>ocil:ssg-sudo_custom_logfile_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_messages_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-package_postfix_installed_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>The·Postfix·package·is·installed</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-package_postfix_installed_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_shared_media_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Configure·Sending·and·Accepting·Shared·Media·Redirects·by·Default</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_shared_media_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_all_shadowed_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·All·Account·Password·Hashes·are·Shadowed</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-a | 31 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_all_shadowed_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-auditd_overflow_action_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-configure_libreswan_crypto_policy_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Configure·Libreswan·to·use·System·Crypto·Policy</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-configure_libreswan_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_minclass_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_daily_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Verify·Owner·on·cron.daily</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Disable·Accepting·ICMP·Redirects·for·All·IPv4·Interfaces</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rmdir_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·rmdir</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_rmdir_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_protected_hardlinks_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Enable·Kernel·Parameter·to·Enforce·DAC·on·Hardlinks</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_protected_hardlinks_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-s | 64 | ····<ocil:questionnaire·id="ocil:ssg-service_cron_enabled_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Enable· | 65 | ······<ocil:title>Enable·cron·Service</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-s | 67 | ········<ocil:test_action_ref>ocil:ssg-service_cron_enabled_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_var_log_syslog_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Verify·User·Who·Owns·/var/log/syslog·File</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_owner_var_log_syslog_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-r | 76 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_x86_vsyscall_emulation_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Disable·x86·vsyscall·emulation</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-r | 79 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_x86_vsyscall_emulation_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_i | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_chmod_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·chmod</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_i | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_chmod_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_issue_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Verify·Group·Ownership·of·System·Login·Banner</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_issue_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_panic_on_oops_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Kernel·panic·on·oops</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_panic_on_oops_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_monthly_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify· | 101 | ······<ocil:title>Verify·Owner·on·cron.monthly</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-file_ | 103 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_ftruncate_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-no_all_squash_exports_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure·All-Squashing·Disabled·On·All·Exports</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-no_all_squash_exports_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_chown_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·chown</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_chown_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_local_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Disable·t | 119 | ······<ocil:title>Disable·Accepting·Packets·Routed·Between·Local·Interfaces</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_accept_local_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_init_ocil:questionnaire:1"> |
| Max diff block lines reached; 1003610/1016322 bytes (98.75%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of | 7 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 216 lines modified | Offset 71, 216 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="machine | 88 | ····<cpe-lang:platform·id="machine"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="package_logrotate"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="g | 103 | ····<cpe-lang:platform·id="package_sudo"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 108 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 112 | ········ | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 113 | ········</cpe-lang:logical-test> | ||
| 114 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 115 | ········ | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 116 | ········</cpe-lang:logical-test> | ||
| 117 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="not_aarch64_arch | 114 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | ||
| 118 | ····</cpe-lang:platform> | ||
| 119 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 123 | ········</cpe-lang:logical-test> | 123 | ········</cpe-lang:logical-test> |
| 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 126 | ········</cpe-lang:logical-test> | 126 | ········</cpe-lang:logical-test> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 127 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="package_yum"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id="package_ | 135 | ····<cpe-lang:platform·id="package_firewalld"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="package_systemd"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 142 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="wifi-iface"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 147 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 148 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 149 | ····<cpe-lang:platform·id="machine_and_package_ | 150 | ····<cpe-lang:platform·id="machine_and_package_squid"> |
| 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_squid:def:1"/> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 154 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 156 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 157 | ······<cpe-lang:logical-test·operator=" | 157 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id=" | 162 | ····<cpe-lang:platform·id="package_gdm"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id=" | 167 | ····<cpe-lang:platform·id="package_postfix"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 170 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 171 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="machine_and_ | 172 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 175 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 176 | ········</cpe-lang:logical-test> | ||
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 178 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| Max diff block lines reached; 620880/635555 bytes (97.69%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis8-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis8-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis8-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis8-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis8-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis8-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis8-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis8-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis8-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis8-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-anolis8-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-anolis8-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-anolis8-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-anolis8-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:anolis:anolis_os:8"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:anolis:anolis_os:8"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Anolis·OS·8</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Anolis·OS·8</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml">oval:ssg-installed_OS_is_anolis8:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml">oval:ssg-installed_OS_is_anolis8:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-anolis8-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-anolis8-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of | 40 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 104, 216 lines modified | Offset 104, 216 lines modified | ||
| 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 110 | ······<cpe-lang:platform-specification> | 110 | ······<cpe-lang:platform-specification> |
| 111 | ········<cpe-lang:platform·id="package_ | 111 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 114 | ··········</cpe-lang:logical-test> | 114 | ··········</cpe-lang:logical-test> |
| 115 | ········</cpe-lang:platform> | 115 | ········</cpe-lang:platform> |
| 116 | ········<cpe-lang:platform·id=" | 116 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 119 | ··········</cpe-lang:logical-test> | 119 | ··········</cpe-lang:logical-test> |
| 120 | ········</cpe-lang:platform> | 120 | ········</cpe-lang:platform> |
| 121 | ········<cpe-lang:platform·id="machine | 121 | ········<cpe-lang:platform·id="machine"> |
| 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 125 | ··········</cpe-lang:logical-test> | 124 | ··········</cpe-lang:logical-test> |
| 126 | ········</cpe-lang:platform> | 125 | ········</cpe-lang:platform> |
| 127 | ········<cpe-lang:platform·id=" | 126 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 128 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 130 | ··········</cpe-lang:logical-test> | 129 | ··········</cpe-lang:logical-test> |
| 131 | ········</cpe-lang:platform> | 130 | ········</cpe-lang:platform> |
| 132 | ········<cpe-lang:platform·id=" | 131 | ········<cpe-lang:platform·id="package_logrotate"> |
| 133 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 135 | ··········</cpe-lang:logical-test> | 134 | ··········</cpe-lang:logical-test> |
| 136 | ········</cpe-lang:platform> | 135 | ········</cpe-lang:platform> |
| 137 | ········<cpe-lang:platform·id="g | 136 | ········<cpe-lang:platform·id="package_sudo"> |
| 138 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 140 | ··········</cpe-lang:logical-test> | 139 | ··········</cpe-lang:logical-test> |
| 141 | ········</cpe-lang:platform> | 140 | ········</cpe-lang:platform> |
| 142 | ········<cpe-lang:platform·id=" | 141 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 143 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 145 | ············ | 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 146 | ············</cpe-lang:logical-test> | ||
| 147 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 148 | ············ | 144 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 149 | ············</cpe-lang:logical-test> | ||
| 150 | ··········</cpe-lang:logical-test> | 145 | ··········</cpe-lang:logical-test> |
| 151 | ········</cpe-lang:platform> | 146 | ········</cpe-lang:platform> |
| 152 | ········<cpe-lang:platform·id="not_aarch64_arch | 147 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 148 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 150 | ··········</cpe-lang:logical-test> | ||
| 151 | ········</cpe-lang:platform> | ||
| 152 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 154 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 155 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 155 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 156 | ············</cpe-lang:logical-test> | 156 | ············</cpe-lang:logical-test> |
| 157 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 157 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 158 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 158 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 159 | ············</cpe-lang:logical-test> | 159 | ············</cpe-lang:logical-test> |
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 160 | ··········</cpe-lang:logical-test> | 161 | ··········</cpe-lang:logical-test> |
| 161 | ········</cpe-lang:platform> | 162 | ········</cpe-lang:platform> |
| 162 | ········<cpe-lang:platform·id=" | 163 | ········<cpe-lang:platform·id="package_yum"> |
| 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 165 | ··········</cpe-lang:logical-test> | 166 | ··········</cpe-lang:logical-test> |
| 166 | ········</cpe-lang:platform> | 167 | ········</cpe-lang:platform> |
| 167 | ········<cpe-lang:platform·id="package_ | 168 | ········<cpe-lang:platform·id="package_firewalld"> |
| 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 170 | ··········</cpe-lang:logical-test> | 171 | ··········</cpe-lang:logical-test> |
| 171 | ········</cpe-lang:platform> | 172 | ········</cpe-lang:platform> |
| 172 | ········<cpe-lang:platform·id=" | 173 | ········<cpe-lang:platform·id="package_systemd"> |
| 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 175 | ··········</cpe-lang:logical-test> | 176 | ··········</cpe-lang:logical-test> |
| 176 | ········</cpe-lang:platform> | 177 | ········</cpe-lang:platform> |
| 177 | ········<cpe-lang:platform·id=" | 178 | ········<cpe-lang:platform·id="wifi-iface"> |
| 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 179 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 180 | ··········</cpe-lang:logical-test> | 181 | ··········</cpe-lang:logical-test> |
| 181 | ········</cpe-lang:platform> | 182 | ········</cpe-lang:platform> |
| 182 | ········<cpe-lang:platform·id="machine_and_package_ | 183 | ········<cpe-lang:platform·id="machine_and_package_squid"> |
| 183 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 184 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_squid:def:1"/> |
| 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 187 | ··········</cpe-lang:logical-test> | 187 | ··········</cpe-lang:logical-test> |
| 188 | ········</cpe-lang:platform> | 188 | ········</cpe-lang:platform> |
| 189 | ········<cpe-lang:platform·id=" | 189 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 190 | ··········<cpe-lang:logical-test·operator=" | 190 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 192 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 192 | ··········</cpe-lang:logical-test> | 193 | ··········</cpe-lang:logical-test> |
| 193 | ········</cpe-lang:platform> | 194 | ········</cpe-lang:platform> |
| 194 | ········<cpe-lang:platform·id=" | 195 | ········<cpe-lang:platform·id="package_gdm"> |
| 195 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 196 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| Max diff block lines reached; 1695782/1710219 bytes (99.16%) of diff not shown. | |||
| Offset 3, 4357 lines modified | Offset 3, 4357 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_sha512_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Sign·kernel·modules·with·SHA-512</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_sha512_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_pub_key_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_pub_key_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-sudo | 10 | ····<ocil:questionnaire·id="ocil:ssg-sudo_remove_nopasswd_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·Users·Re-Authenticate·for·Privilege·Escalation·-·sudo·NOPASSWD</ocil:title> |
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-sudo | 13 | ········<ocil:test_action_ref>ocil:ssg-sudo_remove_nopasswd_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_all_shadowed_ocil:questionnaire:1"> | ||
| 29 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_redirects_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·ICMP·Redirects·by·Default·on·IPv6·Interfaces</ocil:title> | ||
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_accept_redirects_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-package_syslogng_installed_ocil:questionnaire:1"> | ||
| 35 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_gshadow_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Verify·Group·Who·Owns·gshadow·File</ocil:title> | ||
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_ocil:questionnaire:1"> | ||
| 41 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_monthly_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·Permissions·on·cron.monthly</ocil:title> | ||
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-no_netrc_files_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Verify· | 35 | ······<ocil:title>Verify·No·netrc·Files·Exist</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-no_netrc_files_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_protected_symlinks_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 41 | ······<ocil:title>Enable·Kernel·Parameter·to·Enforce·DAC·on·Symlinks</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_protected_symlinks_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_gssapi_auth_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 47 | ······<ocil:title>Disable·GSSAPI·Authentication</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_gssapi_auth_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_gssapi_auth_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 53 | ······<ocil:title>Enable·GSSAPI·Authentication</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_gssapi_auth_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_maxstartups_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·SSH·MaxStartups·is·configured</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_maxstartups_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_pwhistory_remember_system_auth_ocil:questionnaire:1"> | ||
| 77 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_log_martians_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Enable·Kernel·Parameter·to·Log·Martian·Packets·on·all·IPv4·Interfaces</ocil:title> | ||
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_log_martians_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-disallow_bypass_password_sudo_ocil:questionnaire:1"> | ||
| 83 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_filter_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Enable·use·of·Berkeley·Packet·Filter·with·seccomp</ocil:title> | ||
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_filter_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 77 | ······<ocil:title>Verify·Permissions·on·/var/log·Directory</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-dir_ownership_library_dirs_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 83 | ······<ocil:title>Verify·that·Shared·Library·Directories·Have·Root·Ownership</ocil:title> |
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-dir_ownership_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_acpi_custom_method_ocil:questionnaire:1"> | ||
| 101 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmodat_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchmodat</ocil:title> | ||
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchmodat_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-gid_passwd_group_same_ocil:questionnaire:1"> | ||
| 107 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_redirects_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable·Accepting·ICMP·Redirects·for·All·IPv6·Interfaces</ocil:title> | ||
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_accept_redirects_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-service_ip6tables_enabled_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 101 | ······<ocil:title>Verify·ip6tables·Enabled·if·Using·IPv6</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-service_ip6tables_enabled_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_kerb_auth_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 107 | ······<ocil:title>Disable·Kerberos·Authentication</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_kerb_auth_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| Max diff block lines reached; 1002193/1014055 bytes (98.83%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of | 7 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 216 lines modified | Offset 71, 216 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="machine | 88 | ····<cpe-lang:platform·id="machine"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="package_logrotate"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="g | 103 | ····<cpe-lang:platform·id="package_sudo"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 108 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 112 | ········ | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 113 | ········</cpe-lang:logical-test> | ||
| 114 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 115 | ········ | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 116 | ········</cpe-lang:logical-test> | ||
| 117 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="not_aarch64_arch | 114 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | ||
| 118 | ····</cpe-lang:platform> | ||
| 119 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 123 | ········</cpe-lang:logical-test> | 123 | ········</cpe-lang:logical-test> |
| 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 126 | ········</cpe-lang:logical-test> | 126 | ········</cpe-lang:logical-test> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 127 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="package_yum"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id="package_ | 135 | ····<cpe-lang:platform·id="package_firewalld"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="package_systemd"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 142 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="wifi-iface"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 147 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 148 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 149 | ····<cpe-lang:platform·id="machine_and_package_ | 150 | ····<cpe-lang:platform·id="machine_and_package_squid"> |
| 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_squid:def:1"/> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 154 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 156 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 157 | ······<cpe-lang:logical-test·operator=" | 157 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id=" | 162 | ····<cpe-lang:platform·id="package_gdm"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id=" | 167 | ····<cpe-lang:platform·id="package_postfix"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 170 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 171 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="machine_and_ | 172 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 175 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 176 | ········</cpe-lang:logical-test> | ||
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 178 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| Max diff block lines reached; 620467/635092 bytes (97.70%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-12-10">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation. | 42 | in·order·to·support·security·automation. |
| 43 | ········<html:br/> | 43 | ········<html:br/> |
| Offset 554, 15 lines modified | Offset 554, 15 lines modified | ||
| 554 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> | 554 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> |
| 555 | ············</xccdf-1.2:check> | 555 | ············</xccdf-1.2:check> |
| 556 | ··········</xccdf-1.2:Rule> | 556 | ··········</xccdf-1.2:Rule> |
| 557 | ········</xccdf-1.2:Group> | 557 | ········</xccdf-1.2:Group> |
| 558 | ······</xccdf-1.2:Group> | 558 | ······</xccdf-1.2:Group> |
| 559 | ····</xccdf-1.2:Benchmark> | 559 | ····</xccdf-1.2:Benchmark> |
| 560 | ··</ds:component> | 560 | ··</ds:component> |
| 561 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2024-11-0 | 561 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 562 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 562 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 563 | ······<oval-def:generator> | 563 | ······<oval-def:generator> |
| 564 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 564 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 565 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 565 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 566 | ········<oval:schema_version>5.11</oval:schema_version> | 566 | ········<oval:schema_version>5.11</oval:schema_version> |
| 567 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 567 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 568 | ······</oval-def:generator> | 568 | ······</oval-def:generator> |
| Offset 591, 15 lines modified | Offset 591, 15 lines modified | ||
| 591 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> | 591 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> |
| 592 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> | 592 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> |
| 593 | ··········<ind:instance·datatype="int">1</ind:instance> | 593 | ··········<ind:instance·datatype="int">1</ind:instance> |
| 594 | ········</ind:textfilecontent54_object> | 594 | ········</ind:textfilecontent54_object> |
| 595 | ······</oval-def:objects> | 595 | ······</oval-def:objects> |
| 596 | ····</oval-def:oval_definitions> | 596 | ····</oval-def:oval_definitions> |
| 597 | ··</ds:component> | 597 | ··</ds:component> |
| 598 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2024-11-0 | 598 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 599 | ····<ocil:ocil> | 599 | ····<ocil:ocil> |
| 600 | ······<ocil:generator> | 600 | ······<ocil:generator> |
| 601 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 601 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 602 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 602 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 603 | ········<ocil:schema_version>2.0</ocil:schema_version> | 603 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 604 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 604 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 605 | ······</ocil:generator> | 605 | ······</ocil:generator> |
| Offset 650, 15 lines modified | Offset 650, 15 lines modified | ||
| 650 | The·output·should·return·process·information·for | 650 | The·output·should·return·process·information·for |
| 651 | com.apple.auditd | 651 | com.apple.auditd |
| 652 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> | 652 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> |
| 653 | ········</ocil:boolean_question> | 653 | ········</ocil:boolean_question> |
| 654 | ······</ocil:questions> | 654 | ······</ocil:questions> |
| 655 | ····</ocil:ocil> | 655 | ····</ocil:ocil> |
| 656 | ··</ds:component> | 656 | ··</ds:component> |
| 657 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2024-11-0 | 657 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 658 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 658 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 659 | ······<oval-def:generator> | 659 | ······<oval-def:generator> |
| 660 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> | 660 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> |
| 661 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 661 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 662 | ········<oval:schema_version>5.11</oval:schema_version> | 662 | ········<oval:schema_version>5.11</oval:schema_version> |
| 663 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 663 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 664 | ······</oval-def:generator> | 664 | ······</oval-def:generator> |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-10">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 7 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation. | 9 | in·order·to·support·security·automation. |
| 10 | ····<html:br/> | 10 | ····<html:br/> |
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.10"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.10"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4.10</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4.10</cpe-dict:title> |
| Offset 111, 17 lines modified | Offset 111, 17 lines modified | ||
| 111 | ······</cpe-dict:cpe-item> | 111 | ······</cpe-dict:cpe-item> |
| 112 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:openshift_container_platform_node:4"> | 112 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:openshift_container_platform_node:4"> |
| 113 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4·Node</cpe-dict:title> | 113 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4·Node</cpe-dict:title> |
| 114 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4_node:def:1</cpe-dict:check> | 114 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4_node:def:1</cpe-dict:check> |
| 115 | ······</cpe-dict:cpe-item> | 115 | ······</cpe-dict:cpe-item> |
| 116 | ····</cpe-dict:cpe-list> | 116 | ····</cpe-dict:cpe-list> |
| 117 | ··</ds:component> | 117 | ··</ds:component> |
| 118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-xccdf.xml"·timestamp="2024-11-0 | 118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 119 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 119 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 120 | ······<xccdf-1.2:status·date="202 | 120 | ······<xccdf-1.2:status·date="2025-12-10">draft</xccdf-1.2:status> |
| 121 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> | 121 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> |
| 122 | ······<xccdf-1.2:description> | 122 | ······<xccdf-1.2:description> |
| 123 | ········This·guide·presents·a·catalog·of·security-relevant | 123 | ········This·guide·presents·a·catalog·of·security-relevant |
| 124 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of | 124 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of |
| 125 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 125 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 126 | in·order·to·support·security·automation.··The·SCAP·content·is | 126 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 127 | is·available·in·the | 127 | is·available·in·the |
| Offset 189, 196 lines modified | Offset 189, 196 lines modified | ||
| 189 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 189 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 190 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 190 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 191 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 191 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 192 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 192 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 193 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 193 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 194 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 194 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 195 | ······<cpe-lang:platform-specification> | 195 | ······<cpe-lang:platform-specification> |
| 196 | ········<cpe-lang:platform·id="ocp4 | 196 | ········<cpe-lang:platform·id="ocp4-node-on-ovn"> |
| 197 | ··········<cpe-lang:logical-test·operator=" | 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 199 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-ovn:def:1"/> |
| 200 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 201 | ··········</cpe-lang:logical-test> | 199 | ··········</cpe-lang:logical-test> |
| 202 | ········</cpe-lang:platform> | 200 | ········</cpe-lang:platform> |
| 203 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4. | 201 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.8_or_ocp4.9"> |
| 204 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 202 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 205 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 203 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 206 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 204 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 207 | ············</cpe-lang:logical-test> | 205 | ············</cpe-lang:logical-test> |
| 208 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> | 206 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 209 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 207 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 210 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 208 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> |
| 211 | ············</cpe-lang:logical-test> | 209 | ············</cpe-lang:logical-test> |
| 212 | ··········</cpe-lang:logical-test> | 210 | ··········</cpe-lang:logical-test> |
| 213 | ········</cpe-lang:platform> | 211 | ········</cpe-lang:platform> |
| 212 | ········<cpe-lang:platform·id="ocp4-on-hypershift"> | ||
| 213 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 214 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 215 | ··········</cpe-lang:logical-test> | ||
| 216 | ········</cpe-lang:platform> | ||
| 214 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift | 217 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 215 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | 218 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 216 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift | 219 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 217 | ··········</cpe-lang:logical-test> | 220 | ··········</cpe-lang:logical-test> |
| 218 | ········</cpe-lang:platform> | 221 | ········</cpe-lang:platform> |
| 219 | ········<cpe-lang:platform·id="ocp4-n | 222 | ········<cpe-lang:platform·id="ocp4-on-sdn"> |
| 220 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 223 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 224 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> | ||
| 225 | ··········</cpe-lang:logical-test> | ||
| 226 | ········</cpe-lang:platform> | ||
| 227 | ········<cpe-lang:platform·id="not_s390x_arch_and_ocp4-node"> | ||
| 228 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 229 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 221 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | 230 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 222 | ··········</cpe-lang:logical-test> | 231 | ··········</cpe-lang:logical-test> |
| 223 | ········</cpe-lang:platform> | 232 | ········</cpe-lang:platform> |
| 224 | ········<cpe-lang:platform·id="ocp4 | 233 | ········<cpe-lang:platform·id="ocp4.16"> |
| 225 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 234 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 226 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 235 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> |
| 227 | ··········</cpe-lang:logical-test> | 236 | ··········</cpe-lang:logical-test> |
| 228 | ········</cpe-lang:platform> | 237 | ········</cpe-lang:platform> |
| 229 | ········<cpe-lang:platform·id="ocp4-on- | 238 | ········<cpe-lang:platform·id="ocp4-node-on-sdn"> |
| 230 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 239 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 231 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_ | 240 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> |
| 232 | ··········</cpe-lang:logical-test> | 241 | ··········</cpe-lang:logical-test> |
| 233 | ········</cpe-lang:platform> | 242 | ········</cpe-lang:platform> |
| 234 | ········<cpe-lang:platform·id="ocp4 | 243 | ········<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> |
| 235 | ··········<cpe-lang:logical-test·operator=" | 244 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 236 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 245 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 237 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg- | 246 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 238 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 239 | ··········</cpe-lang:logical-test> | 247 | ··········</cpe-lang:logical-test> |
| 240 | ········</cpe-lang:platform> | 248 | ········</cpe-lang:platform> |
| 241 | ········<cpe-lang:platform·id="ocp4 | 249 | ········<cpe-lang:platform·id="ocp4-master-node"> |
| 242 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 250 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 243 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg- | 251 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-node_is_ocp4_master_node:def:1"/> |
| 244 | ··········</cpe-lang:logical-test> | 252 | ··········</cpe-lang:logical-test> |
| 245 | ········</cpe-lang:platform> | 253 | ········</cpe-lang:platform> |
| 246 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.1 | 254 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.12_or_ocp4.13"> |
| 247 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 255 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 248 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 256 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 249 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 257 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 250 | ············</cpe-lang:logical-test> | 258 | ············</cpe-lang:logical-test> |
| 251 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> | 259 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 252 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_1 | 260 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> |
| 253 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 261 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> |
| 254 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 255 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 256 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 257 | ············</cpe-lang:logical-test> | 262 | ············</cpe-lang:logical-test> |
| 258 | ··········</cpe-lang:logical-test> | 263 | ··········</cpe-lang:logical-test> |
| 259 | ········</cpe-lang:platform> | 264 | ········</cpe-lang:platform> |
| 260 | ········<cpe-lang:platform·id="ocp4-node-on-sdn"> | ||
| 261 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 262 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> | ||
| 263 | ··········</cpe-lang:logical-test> | ||
| 264 | ········</cpe-lang:platform> | ||
| 265 | ········<cpe-lang:platform·id="ocp4-node-on-ovn"> | ||
| 266 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 267 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-ovn:def:1"/> | ||
| 268 | ··········</cpe-lang:logical-test> | ||
| 269 | ········</cpe-lang:platform> | ||
| 270 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7"> | 265 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> |
| Max diff block lines reached; 902343/916453 bytes (98.46%) of diff not shown. | |||
| Offset 3, 5235 lines modified | Offset 3, 5385 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_ovs_conf_db_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Verify·User·Who·Owns·The·Open·vSwitch·Configuration·Database</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_owner_ovs_conf_db_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-scheduler_port_is_zero_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Ensure·that·the·port·parameter·is·zero</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-scheduler_port_is_zero_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-etcd_cert_file_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Ensure·That·The·etcd·Client·Certificate·Is·Correctly·Set</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-etcd_cert_file_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-api_server_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-api_server_etcd_ca_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 11 | ······<ocil:title>Configure·the·etcd·Certificate·Authority·for·the·API·Server</ocil:title> |
| 30 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-api_server_ | 13 | ········<ocil:test_action_ref>ocil:ssg-api_server_etcd_ca_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-scc_limit_net_raw_capability_ocil:questionnaire:1"> | ||
| 35 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_eviction_thresholds_set_hard_imagefs_inodesfree_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure·Eviction·threshold·Settings·Are·Set·-·evictionHard:·imagefs.inodesFree</ocil:title> | ||
| 36 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kubelet_eviction_thresholds_set_hard_imagefs_inodesfree_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-api_server_admission_control_plugin_service_account_ocil:questionnaire:1"> | ||
| 41 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-fips_mode_enabled_on_all_nodes_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·that·FIPS·mode·is·enabled·on·all·cluster·nodes</ocil:title> | ||
| 42 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-fips_mode_enabled_on_all_nodes_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-ocp_api_server_audit_log_maxsize_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 29 | ······<ocil:title>Configure·OpenShift·API·Server·Maximum·Audit·Log·Size</ocil:title> |
| 48 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-ocp_api_server_audit_log_maxsize_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-api_server_tls_security_profile_not_old_ocil:questionnaire:1"> | ||
| 53 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-directory_access_var_log_ocp_audit_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Record·Access·Events·to·OpenShift·Audit·Log·Directory</ocil:title> | ||
| 54 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-directory_access_var_log_ocp_audit_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_var_log_kube_audit_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 41 | ······<ocil:title>Kubernetes·Audit·Logs·Must·Be·Owned·By·Root</ocil:title> |
| 60 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_var_log_kube_audit_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-oauthclient_token_maxage_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 47 | ······<ocil:title>Configure·OAuth·clients·so·that·tokens·have·a·maximum·age·set</ocil:title> |
| 66 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-oauthclient_token_maxage_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-image_pruner_active_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 53 | ······<ocil:title>Configure·ImagePruner·so·that·images·that·are·no·longer·needed·are·automatically·removed</ocil:title> |
| 72 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-image_pruner_active_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-accounts_unique_service_account_ocil:questionnaire:1"> | ||
| 77 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-ingress_controller_tls_security_profile_custom_min_tls_version_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure·custom·tlsSecurityProfile·configured·for·IngressController·uses·secure·TLS·version</ocil:title> | ||
| 78 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-ingress_controller_tls_security_profile_custom_min_tls_version_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-scc_limit_ipc_namespace_ocil:questionnaire:1"> | ||
| 83 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_eviction_thresholds_set_soft_imagefs_available_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·Eviction·threshold·Settings·Are·Set·-·evictionSoft:·imagefs.available</ocil:title> | ||
| 84 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-kubelet_eviction_thresholds_set_soft_imagefs_available_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_master_admin_kubeconfigs_ocil:questionnaire:1"> | ||
| 89 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-compliance_notification_enabled_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure·the·notification·is·enabled·for·Compliance·Operator</ocil:title> | ||
| 90 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-compliance_notification_enabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-api_server_auth_mode_no_aa_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 77 | ······<ocil:title>The·authorization-mode·cannot·be·AlwaysAllow</ocil:title> |
| 96 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-api_server_auth_mode_no_aa_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-api_server_admission_control_plugin_alwayspullimages_ocil:questionnaire:1"> | ||
| 101 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-general_default_namespace_use_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>The·default·namespace·should·not·be·used</ocil:title> | ||
| 102 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-general_default_namespace_use_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-gener | 88 | ····<ocil:questionnaire·id="ocil:ssg-ingress_controller_tls_security_profile_not_old_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·IngressController·is·not·configured·to·use·Old·tlsSecurityProfile</ocil:title> |
| 108 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-gener | 91 | ········<ocil:test_action_ref>ocil:ssg-ingress_controller_tls_security_profile_not_old_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-etcd_client_cert_auth_ocil:questionnaire:1"> | ||
| 113 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_scheduler_kubeconfig_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Verify·Permissions·on·the·Kubernetes·Scheduler·Kubeconfig·File</ocil:title> | ||
| 114 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-e | 97 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_scheduler_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-secrets_consider_external_storage_ocil:questionnaire:1"> | ||
| 119 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-rbac_logging_view_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure·that·the·ClusterLogging·and·ClusterLoggingForwarder·resources·are·protected·from·unauthorized·access</ocil:title> | ||
| 120 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| Max diff block lines reached; 837901/850048 bytes (98.57%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-10">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 196 lines modified | Offset 72, 196 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="ocp4 | 79 | ····<cpe-lang:platform·id="ocp4-node-on-ovn"> |
| 80 | ······<cpe-lang:logical-test·operator=" | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-ovn:def:1"/> |
| 83 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 84 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 85 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 86 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4. | 84 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.8_or_ocp4.9"> |
| 87 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 88 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 86 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 89 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 87 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 90 | ········</cpe-lang:logical-test> | 88 | ········</cpe-lang:logical-test> |
| 91 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | 89 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 90 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 93 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 91 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> |
| 94 | ········</cpe-lang:logical-test> | 92 | ········</cpe-lang:logical-test> |
| 95 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 96 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 95 | ····<cpe-lang:platform·id="ocp4-on-hypershift"> | ||
| 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 98 | ······</cpe-lang:logical-test> | ||
| 99 | ····</cpe-lang:platform> | ||
| 97 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift | 100 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 98 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 99 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 100 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 101 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 102 | ····<cpe-lang:platform·id="ocp4-n | 105 | ····<cpe-lang:platform·id="ocp4-on-sdn"> |
| 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> | ||
| 108 | ······</cpe-lang:logical-test> | ||
| 109 | ····</cpe-lang:platform> | ||
| 110 | ····<cpe-lang:platform·id="not_s390x_arch_and_ocp4-node"> | ||
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 105 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 106 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 107 | ····<cpe-lang:platform·id="ocp4 | 116 | ····<cpe-lang:platform·id="ocp4.16"> |
| 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> |
| 110 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 111 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 112 | ····<cpe-lang:platform·id="ocp4-on- | 121 | ····<cpe-lang:platform·id="ocp4-node-on-sdn"> |
| 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_ | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> |
| 115 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 116 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 117 | ····<cpe-lang:platform·id="ocp4 | 126 | ····<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> |
| 118 | ······<cpe-lang:logical-test·operator=" | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg- | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="ocp4 | 132 | ····<cpe-lang:platform·id="ocp4-master-node"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg- | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-node_is_ocp4_master_node:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.1 | 137 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.12_or_ocp4.13"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 132 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 133 | ········</cpe-lang:logical-test> | 141 | ········</cpe-lang:logical-test> |
| 134 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | 142 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 135 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_1 | 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> |
| 136 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 144 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> |
| 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 140 | ········</cpe-lang:logical-test> | 145 | ········</cpe-lang:logical-test> |
| 141 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id="ocp4-node-on-sdn"> | ||
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | ||
| 147 | ····</cpe-lang:platform> | ||
| 148 | ····<cpe-lang:platform·id="ocp4-node-on-ovn"> | ||
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-ovn:def:1"/> | ||
| 151 | ······</cpe-lang:logical-test> | ||
| 152 | ····</cpe-lang:platform> | ||
| 153 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7"> | 148 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> |
| 154 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 157 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 158 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 159 | ····<cpe-lang:platform·id="ocp4 | 155 | ····<cpe-lang:platform·id="ocp4-on-azure"> |
| 160 | ······<cpe-lang:logical-test·operator=" | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_azure:def:1"/> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> | ||
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_14:def:1"/> | ||
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> | ||
| 166 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6_or_ocp4.7_or_ocp4.8"> | 160 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6_or_ocp4.7_or_ocp4.8"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 162 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 171 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 163 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 172 | ········</cpe-lang:logical-test> | 164 | ········</cpe-lang:logical-test> |
| 173 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | 165 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 174 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 166 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 175 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | 167 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| Max diff block lines reached; 13983/28785 bytes (48.58%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openembedded-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openembedded-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:harden:"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:harden:"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·Harden·distribution</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·Harden·distribution</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml">oval:ssg-installed_OS_is_oeharden:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml">oval:ssg-installed_OS_is_oeharden:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:nodistro:"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:nodistro:"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·nodistro</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·nodistro</cpe-dict:title> |
| Offset 39, 17 lines modified | Offset 39, 17 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:poky:"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:poky:"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·Poky·reference·distribution</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·Poky·reference·distribution</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml">oval:ssg-installed_OS_is_poky:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml">oval:ssg-installed_OS_is_poky:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openembedded-xccdf.xml"·timestamp="2024-11-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openembedded-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="202 | 48 | ······<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of | 52 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 54 | in·order·to·support·security·automation.··The·SCAP·content·is | 54 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 55 | is·available·in·the | 55 | is·available·in·the |
| Offset 116, 200 lines modified | Offset 116, 200 lines modified | ||
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id="package_shadow-utils"> | ||
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 126 | ··········</cpe-lang:logical-test> | ||
| 127 | ········</cpe-lang:platform> | ||
| 128 | ········<cpe-lang:platform·id="aarch64_arch"> | ||
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 131 | ··········</cpe-lang:logical-test> | ||
| 132 | ········</cpe-lang:platform> | ||
| 133 | ········<cpe-lang:platform·id="machine"> | ||
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 136 | ··········</cpe-lang:logical-test> | ||
| 137 | ········</cpe-lang:platform> | ||
| 138 | ········<cpe-lang:platform·id="x86_64_arch"> | ||
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 141 | ··········</cpe-lang:logical-test> | ||
| 142 | ········</cpe-lang:platform> | ||
| 123 | ········<cpe-lang:platform·id="package_logrotate"> | 143 | ········<cpe-lang:platform·id="package_logrotate"> |
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 126 | ··········</cpe-lang:logical-test> | 146 | ··········</cpe-lang:logical-test> |
| 127 | ········</cpe-lang:platform> | 147 | ········</cpe-lang:platform> |
| 128 | ········<cpe-lang:platform·id="package_ | 148 | ········<cpe-lang:platform·id="package_sudo"> |
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 150 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 131 | ··········</cpe-lang:logical-test> | 151 | ··········</cpe-lang:logical-test> |
| 132 | ········</cpe-lang:platform> | 152 | ········</cpe-lang:platform> |
| 133 | ········<cpe-lang:platform·id=" | 153 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 156 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 136 | ··········</cpe-lang:logical-test> | 157 | ··········</cpe-lang:logical-test> |
| 137 | ········</cpe-lang:platform> | 158 | ········</cpe-lang:platform> |
| 138 | ········<cpe-lang:platform·id=" | 159 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 160 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 161 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 141 | ··········</cpe-lang:logical-test> | 162 | ··········</cpe-lang:logical-test> |
| 142 | ········</cpe-lang:platform> | 163 | ········</cpe-lang:platform> |
| 143 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 164 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 166 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 146 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 167 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 147 | ············</cpe-lang:logical-test> | 168 | ············</cpe-lang:logical-test> |
| 148 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 169 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 149 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 170 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 150 | ············</cpe-lang:logical-test> | 171 | ············</cpe-lang:logical-test> |
| 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 151 | ··········</cpe-lang:logical-test> | 173 | ··········</cpe-lang:logical-test> |
| 152 | ········</cpe-lang:platform> | 174 | ········</cpe-lang:platform> |
| 153 | ········<cpe-lang:platform·id=" | 175 | ········<cpe-lang:platform·id="package_firewalld"> |
| 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 156 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 157 | ············</cpe-lang:logical-test> | ||
| 158 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 159 | ············ | 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 160 | ············</cpe-lang:logical-test> | ||
| 161 | ··········</cpe-lang:logical-test> | 178 | ··········</cpe-lang:logical-test> |
| 162 | ········</cpe-lang:platform> | 179 | ········</cpe-lang:platform> |
| 163 | ········<cpe-lang:platform·id=" | 180 | ········<cpe-lang:platform·id="package_systemd"> |
| 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 181 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 166 | ··········</cpe-lang:logical-test> | 183 | ··········</cpe-lang:logical-test> |
| 167 | ········</cpe-lang:platform> | 184 | ········</cpe-lang:platform> |
| 168 | ········<cpe-lang:platform·id=" | 185 | ········<cpe-lang:platform·id="wifi-iface"> |
| 169 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 186 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 187 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 171 | ··········</cpe-lang:logical-test> | 188 | ··········</cpe-lang:logical-test> |
| 172 | ········</cpe-lang:platform> | 189 | ········</cpe-lang:platform> |
| 173 | ········<cpe-lang:platform·id=" | 190 | ········<cpe-lang:platform·id="machine_and_package_squid"> |
| 174 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 191 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 192 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_squid:def:1"/> |
| 176 | ··········</cpe-lang:logical-test> | 194 | ··········</cpe-lang:logical-test> |
| 177 | ········</cpe-lang:platform> | 195 | ········</cpe-lang:platform> |
| 178 | ········<cpe-lang:platform·id=" | 196 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 179 | ··········<cpe-lang:logical-test·operator=" | 197 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 199 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 181 | ··········</cpe-lang:logical-test> | 200 | ··········</cpe-lang:logical-test> |
| 182 | ········</cpe-lang:platform> | 201 | ········</cpe-lang:platform> |
| 183 | ········<cpe-lang:platform·id=" | 202 | ········<cpe-lang:platform·id="package_gdm"> |
| 184 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 203 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 1563709/1577200 bytes (99.14%) of diff not shown. | |||
| Offset 3, 6503 lines modified | Offset 3, 6303 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_messages_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Verify·Group·Who·Owns·/var/log/messages·File</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_messages_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·all·IPv6·Interfaces</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-service_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-service_dovecot_disabled_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 11 | ······<ocil:title>Disable·Dovecot·Service</ocil:title> |
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-service_ | 13 | ········<ocil:test_action_ref>ocil:ssg-service_dovecot_disabled_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_kexec_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Disable· | 17 | ······<ocil:title>Disable·kexec·system·call</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_kexec_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_ra_ocil:questionnaire:1"> | ||
| 35 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_dev_shm_nodev_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Add·nodev·Option·to·/dev/shm</ocil:title> | ||
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-mount_option_dev_shm_nodev_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-service_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-service_cron_enabled_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 29 | ······<ocil:title>Enable·cron·Service</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-service_ | 31 | ········<ocil:test_action_ref>ocil:ssg-service_cron_enabled_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-no_rsh_trust_files_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 35 | ······<ocil:title>Remove·Rsh·Trust·Files</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-no_rsh_trust_files_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-package_aide_installed_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 41 | ······<ocil:title>Install·AIDE</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-package_aide_installed_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_tcp_forwarding_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 47 | ······<ocil:title>Disable·SSH·TCP·Forwarding</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_tcp_forwarding_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-grub2_rng_core_default_quality_argument_ocil:questionnaire:1"> | ||
| 65 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_audit_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure·/var/log/audit·Located·On·Separate·Partition</ocil:title> | ||
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 59 | ······<ocil:title>Configure·System·to·Forward·All·Mail·For·The·Root·Account</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-postfix_client_configure_mail_alias_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-service_chronyd_enabled_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 65 | ······<ocil:title>The·Chronyd·service·is·enabled</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-service_chronyd_enabled_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-grub2_password_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 71 | ······<ocil:title>Set·Boot·Loader·Password·in·grub2</ocil:title> |
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-grub2_password_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_shadow_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 77 | ······<ocil:title>Verify·Group·Who·Owns·shadow·File</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-s | 82 | ····<ocil:questionnaire·id="ocil:ssg-service_squid_disabled_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable·S | 83 | ······<ocil:title>Disable·Squid</ocil:title> |
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-s | 85 | ········<ocil:test_action_ref>ocil:ssg-service_squid_disabled_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_hourly_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 89 | ······<ocil:title>Verify·Group·Who·Owns·cron.hourly</ocil:title> |
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_hourly_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_default_mmap_min_addr_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 95 | ······<ocil:title>Configure·Low·Address·Space·To·Protect·From·User·Allocation</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_default_mmap_min_addr_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_private_key_ocil:questionnaire:1"> | ||
| 113 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-service_ufw_enabled_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify·ufw·Enabled</ocil:title> | ||
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-service_ufw_enabled_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rename_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure· | 107 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·rename</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_rename_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_shared_media_ocil:questionnaire:1"> | ||
| 125 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_mac_modification_usr_share_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Record·Events·that·Modify·the·System's·Mandatory·Access·Controls·in·usr/share</ocil:title> | ||
| Max diff block lines reached; 904418/916313 bytes (98.70%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of | 7 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 200 lines modified | Offset 71, 200 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="aarch64_arch"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="machine"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="x86_64_arch"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | ||
| 97 | ····</cpe-lang:platform> | ||
| 78 | ····<cpe-lang:platform·id="package_logrotate"> | 98 | ····<cpe-lang:platform·id="package_logrotate"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="package_ | 103 | ····<cpe-lang:platform·id="package_sudo"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 108 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 114 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 119 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 101 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 102 | ········</cpe-lang:logical-test> | 123 | ········</cpe-lang:logical-test> |
| 103 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 104 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 105 | ········</cpe-lang:logical-test> | 126 | ········</cpe-lang:logical-test> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="package_firewalld"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 111 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 112 | ········</cpe-lang:logical-test> | ||
| 113 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 114 | ········ | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 115 | ········</cpe-lang:logical-test> | ||
| 116 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 117 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 118 | ····<cpe-lang:platform·id=" | 135 | ····<cpe-lang:platform·id="package_systemd"> |
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 121 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="wifi-iface"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 126 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 127 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 128 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="machine_and_package_squid"> |
| 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_squid:def:1"/> |
| 131 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 132 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id=" | 151 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 134 | ······<cpe-lang:logical-test·operator=" | 152 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 136 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 137 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id=" | 157 | ····<cpe-lang:platform·id="package_gdm"> |
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 143 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="package_p | 162 | ····<cpe-lang:platform·id="package_postfix"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_p | 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="machine_and_ | 167 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 170 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 171 | ········</cpe-lang:logical-test> | ||
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 175 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 176 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="no | 177 | ····<cpe-lang:platform·id="non-uefi"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| Max diff block lines reached; 589630/603332 bytes (97.73%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> |
| Offset 35, 17 lines modified | Offset 35, 17 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2024-11-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="202 | 44 | ······<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 50 | in·order·to·support·security·automation.··The·SCAP·content·is | 50 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 51 | is·available·in·the | 51 | is·available·in·the |
| Offset 112, 144 lines modified | Offset 112, 144 lines modified | ||
| 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 118 | ······<cpe-lang:platform-specification> | 118 | ······<cpe-lang:platform-specification> |
| 119 | ········<cpe-lang:platform·id="package_d | 119 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_d | 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 122 | ··········</cpe-lang:logical-test> | 122 | ··········</cpe-lang:logical-test> |
| 123 | ········</cpe-lang:platform> | 123 | ········</cpe-lang:platform> |
| 124 | ········<cpe-lang:platform·id="package_ | 124 | ········<cpe-lang:platform·id="package_ntp"> |
| 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 127 | ··········</cpe-lang:logical-test> | 127 | ··········</cpe-lang:logical-test> |
| 128 | ········</cpe-lang:platform> | 128 | ········</cpe-lang:platform> |
| 129 | ········<cpe-lang:platform·id=" | 129 | ········<cpe-lang:platform·id="machine_and_package_nftables_and_service_disabled_firewalld"> |
| 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 132 | ··········</cpe-lang:logical-test> | 134 | ··········</cpe-lang:logical-test> |
| 133 | ········</cpe-lang:platform> | 135 | ········</cpe-lang:platform> |
| 134 | ········<cpe-lang:platform·id=" | 136 | ········<cpe-lang:platform·id="machine"> |
| 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 137 | ··········</cpe-lang:logical-test> | 139 | ··········</cpe-lang:logical-test> |
| 138 | ········</cpe-lang:platform> | 140 | ········</cpe-lang:platform> |
| 141 | ········<cpe-lang:platform·id="package_sudo"> | ||
| 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 144 | ··········</cpe-lang:logical-test> | ||
| 145 | ········</cpe-lang:platform> | ||
| 146 | ········<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 147 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 149 | ··········</cpe-lang:logical-test> | ||
| 150 | ········</cpe-lang:platform> | ||
| 139 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 151 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 153 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 142 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 154 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 143 | ············</cpe-lang:logical-test> | 155 | ············</cpe-lang:logical-test> |
| 144 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 156 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 145 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 157 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 146 | ············</cpe-lang:logical-test> | 158 | ············</cpe-lang:logical-test> |
| 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 160 | ··········</cpe-lang:logical-test> | ||
| 161 | ········</cpe-lang:platform> | ||
| 162 | ········<cpe-lang:platform·id="package_firewalld"> | ||
| 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 147 | ··········</cpe-lang:logical-test> | 165 | ··········</cpe-lang:logical-test> |
| 148 | ········</cpe-lang:platform> | 166 | ········</cpe-lang:platform> |
| 149 | ········<cpe-lang:platform·id="wifi-iface"> | 167 | ········<cpe-lang:platform·id="wifi-iface"> |
| 150 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 152 | ··········</cpe-lang:logical-test> | 170 | ··········</cpe-lang:logical-test> |
| 153 | ········</cpe-lang:platform> | 171 | ········</cpe-lang:platform> |
| 154 | ········<cpe-lang:platform·id=" | 172 | ········<cpe-lang:platform·id="non-uefi"> |
| 155 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 156 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 157 | ··········</cpe-lang:logical-test> | 175 | ··········</cpe-lang:logical-test> |
| 158 | ········</cpe-lang:platform> | 176 | ········</cpe-lang:platform> |
| 159 | ········<cpe-lang:platform·id=" | 177 | ········<cpe-lang:platform·id="grub2"> |
| 160 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 180 | ··········</cpe-lang:logical-test> | ||
| 181 | ········</cpe-lang:platform> | ||
| 182 | ········<cpe-lang:platform·id="package_chrony"> | ||
| 183 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 162 | ··········</cpe-lang:logical-test> | 185 | ··········</cpe-lang:logical-test> |
| 163 | ········</cpe-lang:platform> | 186 | ········</cpe-lang:platform> |
| 164 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | 187 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 165 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 188 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 190 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 168 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 169 | ··········</cpe-lang:logical-test> | 192 | ··········</cpe-lang:logical-test> |
| 170 | ········</cpe-lang:platform> | 193 | ········</cpe-lang:platform> |
| 171 | ········<cpe-lang:platform·id="package_ | 194 | ········<cpe-lang:platform·id="package_audit"> |
| 172 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 195 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 174 | ··········</cpe-lang:logical-test> | 197 | ··········</cpe-lang:logical-test> |
| 175 | ········</cpe-lang:platform> | 198 | ········</cpe-lang:platform> |
| 176 | ········<cpe-lang:platform·id=" | 199 | ········<cpe-lang:platform·id="package_pam"> |
| 177 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 200 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-p | 201 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 179 | ··········</cpe-lang:logical-test> | 202 | ··········</cpe-lang:logical-test> |
| 180 | ········</cpe-lang:platform> | 203 | ········</cpe-lang:platform> |
| 181 | ········<cpe-lang:platform·id="package_ | 204 | ········<cpe-lang:platform·id="package_bash"> |
| Max diff block lines reached; 1008696/1021490 bytes (98.75%) of diff not shown. | |||
| Offset 3, 3756 lines modified | Offset 3, 3628 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_insmod_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·insmod</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_insmod_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_monthly_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Verify·Group·Who·Owns·cron. | 11 | ······<ocil:title>Verify·Group·Who·Owns·cron.monthly</ocil:title> |
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_daily_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_unlink_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Record·Successful·Delete·Attempts·to·Files·-·unlink</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_successful_file_modification_unlink_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-group_unique_name_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>Ensure·All·Groups·on·the·System·Have·Unique·Group·Names</ocil:title> | ||
| 30 | ······<ocil:actions> | ||
| 31 | ········<ocil:test_action_ref>ocil:ssg-group_unique_name_action:testaction:1</ocil:test_action_ref> | ||
| 32 | ······</ocil:actions> | ||
| 33 | ····</ocil:questionnaire> | ||
| 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_ocil:questionnaire:1"> | ||
| 35 | ······<ocil:title>Enable·seccomp·to·safely·compute·untrusted·bytecode</ocil:title> | ||
| 36 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_gshadow_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Group·Who·Owns·Backup·gshadow·File</ocil:title> |
| 42 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_maximum_age_login_defs_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 23 | ······<ocil:title>Set·Password·Maximum·Age</ocil:title> |
| 48 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-accounts_maximum_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_space_left_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 29 | ······<ocil:title>Configure·auditd·space_left·on·Low·Disk·Space</ocil:title> |
| 54 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_space_left_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> | ||
| 59 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-configure_crypto_policy_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Configure·System·Cryptography·Policy</ocil:title> | ||
| 60 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-configure_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-sudo_restrict_privilege_elevation_to_authorized_ocil:questionnaire:1"> | ||
| 65 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_cron_logging_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·cron·Is·Logging·To·Rsyslog</ocil:title> | ||
| 66 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_cron_logging_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-service_named_disabled_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 47 | ······<ocil:title>Disable·named·Service</ocil:title> |
| 72 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-service_named_disabled_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-service_ntpd_enabled_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 53 | ······<ocil:title>Enable·the·NTP·Daemon</ocil:title> |
| 78 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-service_ntpd_enabled_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_ocil:questionnaire:1"> | ||
| 83 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_systemauth_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Set·PAM''s·Password·Hashing·Algorithm</ocil:title> | ||
| 84 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-s | 61 | ········<ocil:test_action_ref>ocil:ssg-set_password_hashing_algorithm_systemauth_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_retry_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Authentication·Retry·Prompts·Permitted·Per-Session</ocil:title> |
| 90 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_retry_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_ocil:questionnaire:1"> | 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·all·IPv4·Interfaces</ocil:title> | 71 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·all·IPv4·Interfaces</ocil:title> |
| 96 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_action:testaction:1</ocil:test_action_ref> | 73 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-s | 76 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_rp_filter_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Enable·Kernel·Parameter·to·Use·Reverse·Path·Filtering·on·all·IPv4·Interfaces</ocil:title> | ||
| 101 | ······<ocil:title>Set·configuration·for·loopback·traffic</ocil:title> | ||
| 102 | ······<ocil:actions> | ||
| 103 | ········<ocil:test_action_ref>ocil:ssg-set_loopback_traffic_action:testaction:1</ocil:test_action_ref> | ||
| 104 | ······</ocil:actions> | ||
| 105 | ····</ocil:questionnaire> | ||
| 106 | ····<ocil:questionnaire·id="ocil:ssg-group_unique_id_ocil:questionnaire:1"> | ||
| 107 | ······<ocil:title>Ensure·All·Groups·on·the·System·Have·Unique·Group·ID</ocil:title> | ||
| 108 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_rp_filter_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-no_files_unowned_by_user_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·All·Files·Are·Owned·by·a·User</ocil:title> |
| 114 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-no_files_unowned_by_user_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-package_ypserv_removed_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 89 | ······<ocil:title>Uninstall·ypserv·Package</ocil:title> |
| 120 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-package_ypserv_removed_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_at_allow_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 95 | ······<ocil:title>Verify·User·Who·Owns·/etc/at.allow·file</ocil:title> |
| Max diff block lines reached; 534743/545899 bytes (97.96%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 7 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 144 lines modified | Offset 71, 144 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_d | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_d | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="package_ | 83 | ····<cpe-lang:platform·id="package_ntp"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 88 | ····<cpe-lang:platform·id="machine_and_package_nftables_and_service_disabled_firewalld"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="machine"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 103 | ······</cpe-lang:logical-test> | ||
| 104 | ····</cpe-lang:platform> | ||
| 105 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 108 | ······</cpe-lang:logical-test> | ||
| 109 | ····</cpe-lang:platform> | ||
| 98 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 110 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 101 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 102 | ········</cpe-lang:logical-test> | 114 | ········</cpe-lang:logical-test> |
| 103 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 115 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 104 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 116 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 105 | ········</cpe-lang:logical-test> | 117 | ········</cpe-lang:logical-test> |
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 119 | ······</cpe-lang:logical-test> | ||
| 120 | ····</cpe-lang:platform> | ||
| 121 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="wifi-iface"> | 126 | ····<cpe-lang:platform·id="wifi-iface"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id=" | 131 | ····<cpe-lang:platform·id="non-uefi"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 116 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 117 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 118 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="grub2"> |
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | ||
| 140 | ····</cpe-lang:platform> | ||
| 141 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 121 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | 146 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_ | 153 | ····<cpe-lang:platform·id="package_audit"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id=" | 158 | ····<cpe-lang:platform·id="package_pam"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-p | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="package_ | 163 | ····<cpe-lang:platform·id="package_bash"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="package_nt | 168 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nt | 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 148 | ······</cpe-lang:logical-test> | 172 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 173 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="package_ | 174 | ····<cpe-lang:platform·id="package_iptables"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 177 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 178 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id=" | 179 | ····<cpe-lang:platform·id="uefi"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 182 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 183 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw | 184 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 185 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 186 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| Max diff block lines reached; 409508/422738 bytes (96.87%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> |
| Offset 39, 17 lines modified | Offset 39, 17 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2024-11-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="202 | 48 | ······<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of | 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 54 | in·order·to·support·security·automation.··The·SCAP·content·is | 54 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 55 | is·available·in·the | 55 | is·available·in·the |
| Offset 116, 142 lines modified | Offset 116, 142 lines modified | ||
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id="package_logrotate"> | ||
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | ||
| 126 | ··········</cpe-lang:logical-test> | ||
| 127 | ········</cpe-lang:platform> | ||
| 128 | ········<cpe-lang:platform·id="package_ | 123 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 131 | ··········</cpe-lang:logical-test> | ||
| 132 | ········</cpe-lang:platform> | ||
| 133 | ········<cpe-lang:platform·id="grub2"> | ||
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 136 | ··········</cpe-lang:logical-test> | ||
| 137 | ········</cpe-lang:platform> | ||
| 138 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 140 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 141 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 142 | ············</cpe-lang:logical-test> | ||
| 143 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 144 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 145 | ············</cpe-lang:logical-test> | ||
| 146 | ··········</cpe-lang:logical-test> | ||
| 147 | ········</cpe-lang:platform> | ||
| 148 | ········<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 151 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 152 | ············</cpe-lang:logical-test> | ||
| 153 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 154 | ············ | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 155 | ············</cpe-lang:logical-test> | ||
| 156 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 157 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 158 | ········<cpe-lang:platform·id=" | 128 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 159 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 161 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 162 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 163 | ········<cpe-lang:platform·id="machine"> | 133 | ········<cpe-lang:platform·id="machine"> |
| 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 166 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 167 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| 168 | ········<cpe-lang:platform·id=" | 138 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 169 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 173 | ··········</cpe-lang:logical-test> | 141 | ··········</cpe-lang:logical-test> |
| 174 | ········</cpe-lang:platform> | 142 | ········</cpe-lang:platform> |
| 175 | ········<cpe-lang:platform·id="package_ | 143 | ········<cpe-lang:platform·id="package_logrotate"> |
| 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 178 | ··········</cpe-lang:logical-test> | 146 | ··········</cpe-lang:logical-test> |
| 179 | ········</cpe-lang:platform> | 147 | ········</cpe-lang:platform> |
| 180 | ········<cpe-lang:platform·id=" | 148 | ········<cpe-lang:platform·id="package_sudo"> |
| 181 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 150 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 183 | ··········</cpe-lang:logical-test> | 151 | ··········</cpe-lang:logical-test> |
| 184 | ········</cpe-lang:platform> | 152 | ········</cpe-lang:platform> |
| 185 | ········<cpe-lang:platform·id="machine_and_package_ufw"> | 153 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 186 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 187 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 155 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 156 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 189 | ··········</cpe-lang:logical-test> | 157 | ··········</cpe-lang:logical-test> |
| 190 | ········</cpe-lang:platform> | 158 | ········</cpe-lang:platform> |
| 191 | ········<cpe-lang:platform·id=" | 159 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 192 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 160 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 194 | ··········</cpe-lang:logical-test> | ||
| 195 | ········</cpe-lang:platform> | ||
| 196 | ········<cpe-lang:platform·id="package_chrony"> | ||
| 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 161 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 199 | ··········</cpe-lang:logical-test> | 162 | ··········</cpe-lang:logical-test> |
| 200 | ········</cpe-lang:platform> | 163 | ········</cpe-lang:platform> |
| 201 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 164 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 202 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 203 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 166 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 204 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 167 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 205 | ············</cpe-lang:logical-test> | 168 | ············</cpe-lang:logical-test> |
| 206 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 169 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 207 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 170 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 208 | ············</cpe-lang:logical-test> | 171 | ············</cpe-lang:logical-test> |
| Max diff block lines reached; 1106829/1118975 bytes (98.91%) of diff not shown. | |||
| Offset 3, 1945 lines modified | Offset 3, 1945 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_group_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Verify·User·Who·Owns·Backup·group·File</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-coredump_disable_storage_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Disable·storing·core·dump</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-coredump_disable_storage_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_relayhost_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_arp_filter_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Configure·ARP·filtering·for·All·IPv4·Interfaces</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_arp_filter_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-restrict_serial_port_logins_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Restrict·Serial·Port·Root·Logins</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-restrict_serial_port_logins_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_action_mail_acct_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_settimeofday_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Record·attempts·to·alter·time·through·settimeofday</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-audit | 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_settimeofday_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_poweroff_ocil:questionnaire:1"> | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_poweroff_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·poweroff</ocil:title> | 41 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·poweroff</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_poweroff_action:testaction:1</ocil:test_action_ref> | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_poweroff_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_var_log_messages_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Verify·User·Who·Owns·/var/log/messages·File</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_owner_var_log_messages_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_home_dirs_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_setxattr_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·setxattr</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_setxattr_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_pub_key_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable·SSH·Access·via·Empty·Passwords</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_empty_passwords_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-disable_host_auth_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable· | 71 | ······<ocil:title>Disable·Host-Based·Authentication</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-disable_host_auth_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-set_iptables_default_rule_forward_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_etc_shadow_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure·There·Are·No·Accounts·With·Blank·or·Null·Passwords</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-no_empty_passwords_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_login_defs_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·the·Default·Umask·is·Set·Correctly·in·login.defs</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_login_defs_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_sshd_pub_key_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Verify·Ownership·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fsetxattr_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmep_argument_absent_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·SMEP·is·not·disabled·during·boot</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-grub2_nosmep_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-grub2_mce_argument_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Force·kernel·panic·on·uncorrected·MCEs</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-grub2_mce_argument_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_gshadow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Verify·Permissions·on·gshadow·File</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_default_mmap_min_addr_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-service_iptables_enabled_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify·iptables·Enabled</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-service_iptables_enabled_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-audit | 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-audit | 121 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| Max diff block lines reached; 645490/657760 bytes (98.13%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·openSUSE.·It·is·a·rendering·of | 7 | configuration·settings·for·openSUSE.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 142 lines modified | Offset 71, 142 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_logrotate"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="grub2"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 97 | ········</cpe-lang:logical-test> | ||
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 100 | ········</cpe-lang:logical-test> | ||
| 101 | ······</cpe-lang:logical-test> | ||
| 102 | ····</cpe-lang:platform> | ||
| 103 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 107 | ········</cpe-lang:logical-test> | ||
| 108 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 109 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 110 | ········</cpe-lang:logical-test> | ||
| 111 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 116 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 117 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 118 | ····<cpe-lang:platform·id="machine"> | 88 | ····<cpe-lang:platform·id="machine"> |
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 121 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_ | 98 | ····<cpe-lang:platform·id="package_logrotate"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id=" | 103 | ····<cpe-lang:platform·id="package_sudo"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | 108 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 114 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | ||
| 150 | ····</cpe-lang:platform> | ||
| 151 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 119 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 159 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 160 | ········</cpe-lang:logical-test> | 123 | ········</cpe-lang:logical-test> |
| 161 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 162 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 163 | ········</cpe-lang:logical-test> | 126 | ········</cpe-lang:logical-test> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 133 | ······</cpe-lang:logical-test> | ||
| 134 | ····</cpe-lang:platform> | ||
| 167 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 135 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 168 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 176 | ······</cpe-lang:logical-test> | ||
| 177 | ····</cpe-lang:platform> | ||
| 178 | ····<cpe-lang:platform·id="package_gdm"> | 141 | ····<cpe-lang:platform·id="package_gdm"> |
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 181 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 407590/419182 bytes (97.23%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-rhcos4-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-rhcos4-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:enterprise_linux_coreos:4"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:enterprise_linux_coreos:4"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·Enterprise·Linux·CoreOS·4</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·Enterprise·Linux·CoreOS·4</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml">oval:ssg-installed_OS_is_rhcos4:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml">oval:ssg-installed_OS_is_rhcos4:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-rhcos4-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-rhcos4-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of | 40 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 104, 336 lines modified | Offset 104, 336 lines modified | ||
| 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 110 | ······<cpe-lang:platform-specification> | 110 | ······<cpe-lang:platform-specification> |
| 111 | ········<cpe-lang:platform·id="package_logrotate"> | ||
| 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | ||
| 114 | ··········</cpe-lang:logical-test> | ||
| 115 | ········</cpe-lang:platform> | ||
| 116 | ········<cpe-lang:platform·id="package_iptables"> | ||
| 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 119 | ··········</cpe-lang:logical-test> | ||
| 120 | ········</cpe-lang:platform> | ||
| 121 | ········<cpe-lang:platform·id="machine_and_ | 111 | ········<cpe-lang:platform·id="machine_and_not_s390x_arch"> |
| 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 114 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> |
| 125 | ··········</cpe-lang:logical-test> | 115 | ··········</cpe-lang:logical-test> |
| 126 | ········</cpe-lang:platform> | 116 | ········</cpe-lang:platform> |
| 127 | ········<cpe-lang:platform·id=" | 117 | ········<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 128 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 119 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 131 | ··········</cpe-lang:logical-test> | 120 | ··········</cpe-lang:logical-test> |
| 132 | ········</cpe-lang:platform> | 121 | ········</cpe-lang:platform> |
| 133 | ········<cpe-lang:platform·id=" | 122 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 137 | ··········</cpe-lang:logical-test> | 125 | ··········</cpe-lang:logical-test> |
| 138 | ········</cpe-lang:platform> | 126 | ········</cpe-lang:platform> |
| 139 | ········<cpe-lang:platform·id="package_p | 127 | ········<cpe-lang:platform·id="package_apparmor"> |
| 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_p | 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_apparmor:def:1"/> |
| 142 | ··········</cpe-lang:logical-test> | 130 | ··········</cpe-lang:logical-test> |
| 143 | ········</cpe-lang:platform> | 131 | ········</cpe-lang:platform> |
| 144 | ········<cpe-lang:platform·id=" | 132 | ········<cpe-lang:platform·id="package_ntp"> |
| 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 134 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 148 | ··········</cpe-lang:logical-test> | 135 | ··········</cpe-lang:logical-test> |
| 149 | ········</cpe-lang:platform> | 136 | ········</cpe-lang:platform> |
| 150 | ········<cpe-lang:platform·id=" | 137 | ········<cpe-lang:platform·id="rhcos4-rhel9"> |
| 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 139 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 153 | ··········</cpe-lang:logical-test> | 140 | ··········</cpe-lang:logical-test> |
| 154 | ········</cpe-lang:platform> | 141 | ········</cpe-lang:platform> |
| 155 | ········<cpe-lang:platform·id=" | 142 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 144 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 158 | ··········</cpe-lang:logical-test> | 145 | ··········</cpe-lang:logical-test> |
| 159 | ········</cpe-lang:platform> | 146 | ········</cpe-lang:platform> |
| 160 | ········<cpe-lang:platform·id=" | 147 | ········<cpe-lang:platform·id="machine"> |
| 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 163 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 164 | ············</cpe-lang:logical-test> | ||
| 165 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 166 | ············ | 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 167 | ············</cpe-lang:logical-test> | ||
| 168 | ··········</cpe-lang:logical-test> | 150 | ··········</cpe-lang:logical-test> |
| 169 | ········</cpe-lang:platform> | 151 | ········</cpe-lang:platform> |
| 170 | ········<cpe-lang:platform·id=" | 152 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 171 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 173 | ············ | 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 174 | ············</cpe-lang:logical-test> | ||
| 175 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 176 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 177 | ············</cpe-lang:logical-test> | ||
| 178 | ··········</cpe-lang:logical-test> | 155 | ··········</cpe-lang:logical-test> |
| 179 | ········</cpe-lang:platform> | 156 | ········</cpe-lang:platform> |
| 180 | ········<cpe-lang:platform·id=" | 157 | ········<cpe-lang:platform·id="package_libreswan"> |
| 181 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 183 | ··········</cpe-lang:logical-test> | 160 | ··········</cpe-lang:logical-test> |
| 184 | ········</cpe-lang:platform> | 161 | ········</cpe-lang:platform> |
| 185 | ········<cpe-lang:platform·id="package_ | 162 | ········<cpe-lang:platform·id="package_sssd"> |
| 186 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 187 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_sssd:def:1"/> |
| 188 | ··········</cpe-lang:logical-test> | 165 | ··········</cpe-lang:logical-test> |
| 189 | ········</cpe-lang:platform> | 166 | ········</cpe-lang:platform> |
| 190 | ········<cpe-lang:platform·id=" | 167 | ········<cpe-lang:platform·id="package_tmux"> |
| 191 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 192 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_tmux:def:1"/> |
| 193 | ··········</cpe-lang:logical-test> | 170 | ··········</cpe-lang:logical-test> |
| 194 | ········</cpe-lang:platform> | 171 | ········</cpe-lang:platform> |
| 195 | ········<cpe-lang:platform·id=" | 172 | ········<cpe-lang:platform·id="package_logrotate"> |
| 196 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 198 | ··········</cpe-lang:logical-test> | 175 | ··········</cpe-lang:logical-test> |
| 199 | ········</cpe-lang:platform> | 176 | ········</cpe-lang:platform> |
| 200 | ········<cpe-lang:platform·id="machine_and_ | 177 | ········<cpe-lang:platform·id="machine_and_mount_home"> |
| 201 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 202 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 203 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 204 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| Max diff block lines reached; 1726275/1740316 bytes (99.19%) of diff not shown. | |||
| Offset 3, 7745 lines modified | Offset 3, 7745 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sssd_proxy_child_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·sssd_proxy_child</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_sssd_proxy_child_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_audit_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Account·Lockouts·Must·Be·Logged</ocil:title> | ||
| 17 | ······<ocil:title>Verify·User·Who·Owns·passwd·File</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_passwd_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-service_ip6tables_enabled_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Verify·ip6tables·Enabled·if·Using·IPv6</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-service_ip6tables_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-package_dracut-fips_installed_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>Install·the·dracut-fips·Package</ocil:title> | ||
| 30 | ······<ocil:actions> | ||
| 31 | ········<ocil:test_action_ref>ocil:ssg-package_dracut-fips_installed_action:testaction:1</ocil:test_action_ref> | ||
| 32 | ······</ocil:actions> | ||
| 33 | ····</ocil:questionnaire> | ||
| 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_mount_nfs_ocil:questionnaire:1"> | ||
| 35 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·mount.nfs</ocil:title> | ||
| 36 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-a | 13 | ········<ocil:test_action_ref>ocil:ssg-account_passwords_pam_faillock_audit_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_l | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_openat_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Record· | 17 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·openat</ocil:title> |
| 42 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_l | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_openat_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-zipl_enable_selinux_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·SELinux·Not·Disabled·in·zIPL</ocil:title> |
| 48 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-zipl_enable_selinux_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts_no_uid_except_zero_ocil:questionnaire:1"> | ||
| 53 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-grub2_disable_interactive_boot_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·that·Interactive·Boot·is·Disabled</ocil:title> | ||
| 54 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-grub2_disable_interactive_boot_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_nodev_removable_partitions_ocil:questionnaire:1"> | ||
| 59 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-harden_openssl_crypto_policy_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Harden·OpenSSL·Crypto·Policy</ocil:title> | ||
| 60 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-harden_openssl_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmep_argument_absent_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 41 | ······<ocil:title>Ensure·SMEP·is·not·disabled·during·boot</ocil:title> |
| 66 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-grub2_nosmep_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-grub2_disable_interactive_boot_ocil:questionnaire:1"> | ||
| 71 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_retry_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Authentication·Retry·Prompts·Permitted·Per-Session</ocil:title> | ||
| 72 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_retry_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permission_user_init_files_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>A | 53 | ······<ocil:title>Ensure·All·User·Initialization·Files·Have·Mode·0740·Or·Less·Permissive</ocil:title> |
| 78 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_permission_user_init_files_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-service_firewalld_enabled_ocil:questionnaire:1"> | 58 | ····<ocil:questionnaire·id="ocil:ssg-service_firewalld_enabled_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Verify·firewalld·Enabled</ocil:title> | 59 | ······<ocil:title>Verify·firewalld·Enabled</ocil:title> |
| 84 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-service_firewalld_enabled_action:testaction:1</ocil:test_action_ref> | 61 | ········<ocil:test_action_ref>ocil:ssg-service_firewalld_enabled_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_renameat_ocil:questionnaire:1"> | ||
| 89 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_tmp_noexec_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Add·noexec·Option·to·/var/tmp</ocil:title> | ||
| 90 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-mount_option_var_tmp_noexec_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_modify_failed_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 71 | ······<ocil:title>Configure·auditing·of·unsuccessful·file·modifications</ocil:title> |
| 96 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_modify_failed_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_explicit_command_args_ocil:questionnaire:1"> | ||
| 101 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_dbus_daemon_launch_helper_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·dbus·helper</ocil:title> | ||
| 102 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_dbus_daemon_launch_helper_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_ocil:questionnaire:1"> | ||
| 107 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_syslog_plugin_activated_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Configure·auditd·to·use·audispd's·syslog·plugin</ocil:title> | ||
| 108 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-auditd_audispd_syslog_plugin_activated_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_slub_debug_ocil:questionnaire:1"> | 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_slub_debug_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Enable·SLUB·debugging·support</ocil:title> | 89 | ······<ocil:title>Enable·SLUB·debugging·support</ocil:title> |
| 114 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_slub_debug_action:testaction:1</ocil:test_action_ref> | 91 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_slub_debug_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_ocil:questionnaire:1"> | ||
| 119 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_library_dirs_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Verify·that·Shared·Library·Directories·Have·Restrictive·Permissions</ocil:title> | ||
| 120 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-dir_permissions_library_dirs_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 1616455/1627449 bytes (99.32%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 336 lines modified | Offset 71, 336 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_logrotate"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="machine_and_ | 78 | ····<cpe-lang:platform·id="machine_and_not_s390x_arch"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 98 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 104 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 105 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 106 | ····<cpe-lang:platform·id="package_p | 94 | ····<cpe-lang:platform·id="package_apparmor"> |
| 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_p | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_apparmor:def:1"/> |
| 109 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 110 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 111 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="package_ntp"> |
| 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 115 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 116 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 117 | ····<cpe-lang:platform·id=" | 104 | ····<cpe-lang:platform·id="rhcos4-rhel9"> |
| 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 120 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 121 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 122 | ····<cpe-lang:platform·id=" | 109 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 125 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 126 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 127 | ····<cpe-lang:platform·id=" | 114 | ····<cpe-lang:platform·id="machine"> |
| 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 130 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 131 | ········</cpe-lang:logical-test> | ||
| 132 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 133 | ········ | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 134 | ········</cpe-lang:logical-test> | ||
| 135 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id=" | 119 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 140 | ········ | 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 141 | ········</cpe-lang:logical-test> | ||
| 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 144 | ········</cpe-lang:logical-test> | ||
| 145 | ······</cpe-lang:logical-test> | 122 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 123 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id=" | 124 | ····<cpe-lang:platform·id="package_libreswan"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 127 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 128 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="package_ | 129 | ····<cpe-lang:platform·id="package_sssd"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_sssd:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 132 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 133 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 134 | ····<cpe-lang:platform·id="package_tmux"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_tmux:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 137 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 138 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 139 | ····<cpe-lang:platform·id="package_logrotate"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 142 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 143 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="machine_and_ | 144 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 172 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id="machine_and_not_ | 150 | ····<cpe-lang:platform·id="not_aarch64_arch_and_machine_and_not_ppc64le_arch"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 152 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 177 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 153 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 154 | ········</cpe-lang:logical-test> | ||
| 155 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 156 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_ppc64le:def:1"/> | ||
| 178 | ········</cpe-lang:logical-test> | 157 | ········</cpe-lang:logical-test> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 180 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 181 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 182 | ····<cpe-lang:platform·id=" | 161 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 183 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 28518/42770 bytes (66.68%) of diff not shown. | |||
| Offset 3, 4627 lines modified | Offset 3, 4627 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-sshd_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_verbose_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Set·SSH·Daemon·LogLevel·to·VERBOSE</ocil:title> | ||
| 11 | ······<ocil:title>Disable·PubkeyAuthentication·Authentication</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_pubkey_auth_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_creat_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Record·Successful·Access·Attempts·to·Files·-·creat</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_loglevel_verbose_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_server_directive_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure· | 17 | ······<ocil:title>Ensure·Chrony·is·only·configured·with·the·server·directive</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-chronyd_server_directive_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_list_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Enable·checks·on·linked·list·manipulation</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_list_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-account_use_centralized_automated_auth_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 29 | ······<ocil:title>Use·Centralized·and·Automated·Authentication</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-account_use_centralized_automated_auth_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 35 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-service_ip6tables_enabled_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 41 | ······<ocil:title>Verify·ip6tables·Enabled·if·Using·IPv6</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-service_ip6tables_enabled_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_issue_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Verify·ownership·of·System·Login·Banner</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_issue_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-package_iptables_installed_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 53 | ······<ocil:title>Install·iptables·Package</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-package_iptables_installed_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-package_cron_installed_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Install·the·cron·service</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-package_cron_installed_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rename_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure· | 65 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·rename</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_rename_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_group_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>Verify·User·Who·Owns·group·File</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_group_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_kexec_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Disable·kexec·system·call</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_kexec_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-auditd_write_logs_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Write·Audit·Logs·to·the·Disk</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-auditd_write_logs_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_adjtimex_ocil:questionnaire:1"> | ||
| 95 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable·IPv6·Addressing·on·IPv6·Interfaces·by·Default</ocil:title> | ||
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_x11_forwarding_ocil:questionnaire:1"> | ||
| 101 | ····· | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_open_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Record·Successful·Access·Attempts·to·Files·-·open</ocil:title> | ||
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-ss | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_successful_file_modification_open_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-s | 100 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_deny_root_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Configure·the·root·Account·for·Failed·Password·Attempts</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-s | 103 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_faillock_deny_root_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_action_mail_acct_ocil:questionnaire:1"> | ||
| 113 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_dcredit_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Digit·Characters</ocil:title> | ||
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-a | 109 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_dcredit_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_polyinstantiated_tmp_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Configure·Polyinstantiation·of·/tmp·Directories</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-accounts_polyinstantiated_tmp_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> | ||
| 125 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-accounts_minimum_age_login_defs_ocil:questionnaire:1"> |
| Max diff block lines reached; 1566313/1578802 bytes (99.21%) of diff not shown. | |||
| Offset 3, 13040 lines modified | Offset 3, 13169 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-no_forward_files_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Verify·No·.forward·Files·Exist</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-no_forward_files_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-banner_etc_motd_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Modify·the·System·Message·of·the·Day·Banner</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-banner_etc_motd_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_suid_privilege_function_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-package_openssh_removed_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Remove·the·OpenSSH·Client·and·Server·Package</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-a | 25 | ········<ocil:test_action_ref>ocil:ssg-package_openssh_removed_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-journald_storage_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·journald·is·configured·to·write·log·files·to·persistent·disk</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-journald_storage_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_local_var_log_messages_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-service_postfix_enabled_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Enable·Postfix·Service</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-service_postfix_enabled_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sssd_memcache_timeout_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_init_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Kernel·Module·Loading·-·init_module</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-s | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_kernel_module_loading_init_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-policy_temp_passwords_immediate_change_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_binfmt_misc_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable·kernel·support·for·MISC·binaries</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_binfmt_misc_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_disk_full_action_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-group_unique_name_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure·All·Groups·on·the·System·Have·Unique·Group·Names</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-group_unique_name_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_cramfs_disabled_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Disable·Mounting·of·cramfs</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_cramfs_disabled_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_exec_shield_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Enable·ExecShield·via·sysctl</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_exec_shield_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-configure_libreswan_crypto_policy_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Configure·Libreswan·to·use·System·Crypto·Policy</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-configure_libreswan_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_limit_user_access_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-accounts_have_homedir_login_defs_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure·Home·Directories·are·Created·for·New·Users</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-s | 79 | ········<ocil:test_action_ref>ocil:ssg-accounts_have_homedir_login_defs_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-package_httpd_removed_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Uninstall·httpd·Package</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-package_httpd_removed_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-package_cups_removed_ocil:questionnaire:1"> | ||
| 89 | ····· | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_openat_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·openat</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_openat_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-ser | 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_modules_disabled_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Disable·loading·and·unloading·of·kernel·modules</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-ser | 97 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_modules_disabled_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-cracklib_accounts_password_pam_lcredit_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chfn_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·chfn</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_chfn_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-s | 106 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_local_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable·t | 107 | ······<ocil:title>Disable·Accepting·Packets·Routed·Between·Local·Interfaces</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-s | 109 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_accept_local_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-ensure_gpgcheck_globally_activated_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_info_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Set·LogLevel·to·INFO</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_loglevel_info_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-sudo_dedicated_group_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Ensure·a·dedicated·group·owns·sudo</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| Max diff block lines reached; 1792967/1805191 bytes (99.32%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.3"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.3"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.3</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.3</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.4"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.4"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.4</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.4</cpe-dict:title> |
| Offset 39, 17 lines modified | Offset 39, 17 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-microos:5.2"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-microos:5.2"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">SLE·MicroOS·5.2</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">SLE·MicroOS·5.2</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-xccdf.xml"·timestamp="2024-11-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="202 | 48 | ······<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of | 52 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 54 | in·order·to·support·security·automation.··The·SCAP·content·is | 54 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 55 | is·available·in·the | 55 | is·available·in·the |
| Offset 116, 32 lines modified | Offset 116, 32 lines modified | ||
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id=" | 123 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 126 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 127 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 128 | ········<cpe-lang:platform·id=" | 128 | ········<cpe-lang:platform·id="machine"> |
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 131 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 132 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 133 | ········<cpe-lang:platform·id="package_ | 133 | ········<cpe-lang:platform·id="package_audit"> |
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_ | 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 136 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 137 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| 138 | ········<cpe-lang:platform·id="package_ | 138 | ········<cpe-lang:platform·id="package_pam"> |
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_ | 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 141 | ··········</cpe-lang:logical-test> | 141 | ··········</cpe-lang:logical-test> |
| 142 | ········</cpe-lang:platform> | 142 | ········</cpe-lang:platform> |
| 143 | ······</cpe-lang:platform-specification> | 143 | ······</cpe-lang:platform-specification> |
| 144 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> | 144 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> |
| 145 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> | 145 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> |
| 146 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> | 146 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> |
| 147 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> | 147 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> |
| Offset 704, 14 lines modified | Offset 704, 61 lines modified | ||
| 704 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00226</xccdf-1.2:reference> | 704 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00226</xccdf-1.2:reference> |
| 705 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-412025</xccdf-1.2:reference> | 705 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-412025</xccdf-1.2:reference> |
| 706 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261365r996541_rule</xccdf-1.2:reference> | 706 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261365r996541_rule</xccdf-1.2:reference> |
| 707 | ················<xccdf-1.2:rationale>Limiting·the·number·of·logon·attempts·over·a·certain·time·interval·reduces | 707 | ················<xccdf-1.2:rationale>Limiting·the·number·of·logon·attempts·over·a·certain·time·interval·reduces |
| 708 | the·chances·that·an·unauthorized·user·may·gain·access·to·an·account.</xccdf-1.2:rationale> | 708 | the·chances·that·an·unauthorized·user·may·gain·access·to·an·account.</xccdf-1.2:rationale> |
| 709 | ················<xccdf-1.2:platform·idref="#package_pam"/> | 709 | ················<xccdf-1.2:platform·idref="#package_pam"/> |
| 710 | ················<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94092-4</xccdf-1.2:ident> | 710 | ················<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94092-4</xccdf-1.2:ident> |
| 711 | ················<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="accounts_passwords_pam_faildelay_delay"> | ||
| 712 | ··················#·Remediation·is·applicable·only·in·certain·platforms | ||
| 713 | if·rpm·--quiet·-q·pam;·then | ||
| 714 | var_password_pam_delay=' | ||
| 715 | ··················<xccdf-1.2:sub·idref="xccdf_org.ssgproject.content_value_var_password_pam_delay"·use="legacy"/> | ||
| 716 | ··················' | ||
| 717 | if·[·-e·"/etc/pam.d/common-auth"·]·;·then | ||
| 718 | ····valueRegex="$var_password_pam_delay"·defaultValue="$var_password_pam_delay" | ||
| 719 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 720 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 721 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 722 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 723 | ····#·fix·'type'·if·it's·wrong | ||
| 724 | ····if·grep·-q·-P·"^\\s*(?"'!'"auth\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·;·then | ||
| 725 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum:]]+\\s+pam_faildelay.so)/\\1auth\\2/"·"/etc/pam.d/common-auth" | ||
| 726 | ····fi | ||
| 727 | ····#·fix·'control'·if·it's·wrong | ||
| 728 | ····if·grep·-q·-P·"^\\s*auth\\s+(?"'!'"required)[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·;·then | ||
| 729 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+)[[:alnum:]]+(\\s+pam_faildelay.so)/\\1required\\2/"·"/etc/pam.d/common-auth" | ||
| 730 | ····fi | ||
| 731 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 732 | ····if·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-auth"·;·then | ||
| 733 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s)delay=[^[:space:]]*/\\1delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 734 | ····#·add·'option=default'·if·option·is·not·set | ||
| 735 | ····elif·grep·-q·-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·&& | ||
| 736 | ············grep····-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·|·grep·-q·-E·-v·"\\sdelay(=|\\s|\$)"·;·then | ||
| 737 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so[^\\n]*)/\\1·delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 738 | ····#·add·a·new·entry·if·none·exists | ||
| 739 | ····elif·!·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay${valueRegex}(\\s|\$)"·<·"/etc/pam.d/common-auth"·;·then | ||
| 740 | ········echo·"auth·required·pam_faildelay.so·delay${defaultValue}"·>>·"/etc/pam.d/common-auth" | ||
| 741 | ····fi | ||
| 742 | else | ||
| 743 | ····echo·"/etc/pam.d/common-auth·doesn't·exist"·>&2 | ||
| 744 | fi | ||
| 745 | else | ||
| 746 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 747 | fi | ||
| 748 | ················</xccdf-1.2:fix> | ||
| 711 | ················<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="accounts_passwords_pam_faildelay_delay"·complexity="low"·disruption="low"·reboot="false"·strategy="restrict"> | 749 | ················<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="accounts_passwords_pam_faildelay_delay"·complexity="low"·disruption="low"·reboot="false"·strategy="restrict"> |
| 712 | ··················-·name:·Gather·the·package·facts | 750 | ··················-·name:·Gather·the·package·facts |
| 713 | ··package_facts: | 751 | ··package_facts: |
| 714 | ····manager:·auto | 752 | ····manager:·auto |
| 715 | ··tags: | 753 | ··tags: |
| 716 | ··-·CCE-94092-4 | 754 | ··-·CCE-94092-4 |
| Max diff block lines reached; 791448/801921 bytes (98.69%) of diff not shown. | |||
| Offset 3, 1033 lines modified | Offset 3, 1033 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_r | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_crontab_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·r | 11 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·crontab</ocil:title> |
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_rmmod_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_usermod_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·usermod</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_crontab_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setsebool_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Record·Any·Attempts·to·Run·setsebool</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_setsebool_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_unix_chkpwd_ocil:questionnaire:1"> | ||
| 29 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_user_known_hosts_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·SSH·Support·for·User·Known·Hosts</ocil:title> | ||
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_user_known_hosts_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setf | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setfacl_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Record·Any·Attempts·to·Run·setf | 29 | ······<ocil:title>Record·Any·Attempts·to·Run·setfacl</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_setf | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_setfacl_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_print_last_log_ocil:questionnaire:1"> | ||
| 41 | ····· | 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ssh_agent_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Record·Any·Attempts·to·Run·ssh-agent</ocil:title> | ||
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ssh_agent_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_strictmodes_ocil:questionnaire:1"> | 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_strictmodes_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Enable·Use·of·Strict·Mode·Checking</ocil:title> | 41 | ······<ocil:title>Enable·Use·of·Strict·Mode·Checking</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_strictmodes_action:testaction:1</ocil:test_action_ref> | 43 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_strictmodes_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sudo_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 47 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·sudo</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_sudo_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_kmod_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 53 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·kmod</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_kmod_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ssh_keysign_ocil:questionnaire:1"> | ||
| 65 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-sshd_do_not_permit_user_env_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Do·Not·Allow·SSH·Environment·Options</ocil:title> | ||
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sshd_do_not_permit_user_env_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setsebool_ocil:questionnaire:1"> | ||
| 71 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_tally2_file_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>SLEM·5·must·use·the·default·pam_tally2·tally·directory.</ocil:title> | ||
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-a | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_tally2_file_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setfiles_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>Record·Any·Attempts·to·Run·setfiles</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_setfiles_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-sshd_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Enable·SSH·Warning·Banner</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-sshd_ | 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_warning_banner_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_e | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sudoedit_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·sudoedit</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_e | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_sudoedit_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_e | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chsh_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·chsh</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_e | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_chsh_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-package_audit-audispd-plugins_installed_ocil:questionnaire:1"> | 94 | ····<ocil:questionnaire·id="ocil:ssg-package_audit-audispd-plugins_installed_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure·the·default·plugins·for·the·audit·dispatcher·are·Installed</ocil:title> | 95 | ······<ocil:title>Ensure·the·default·plugins·for·the·audit·dispatcher·are·Installed</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-package_audit-audispd-plugins_installed_action:testaction:1</ocil:test_action_ref> | 97 | ········<ocil:test_action_ref>ocil:ssg-package_audit-audispd-plugins_installed_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_print_last_log_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Enable·SSH·Print·Last·Log</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_ | 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_print_last_log_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_login_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 107 | ······<ocil:title>Disable·SSH·Root·Login</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_login_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_chmod_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Record·Any·Attempts·to·Run·chmod</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_chmod_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-selinux_state_ocil:questionnaire:1"> | ||
| 125 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_usermod_ocil:questionnaire:1"> |
| Max diff block lines reached; 86451/98803 bytes (87.50%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of | 7 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 32 lines modified | Offset 71, 32 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="machine"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_ | 88 | ····<cpe-lang:platform·id="package_audit"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_ | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="package_ | 93 | ····<cpe-lang:platform·id="package_pam"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_ | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 98 | ··</cpe-lang:platform-specification> | 98 | ··</cpe-lang:platform-specification> |
| 99 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> | 99 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> |
| 100 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> | 100 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> |
| 101 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> | 101 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> |
| 102 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> | 102 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> |
| Offset 659, 14 lines modified | Offset 659, 61 lines modified | ||
| 659 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00226</xccdf-1.2:reference> | 659 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00226</xccdf-1.2:reference> |
| 660 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-412025</xccdf-1.2:reference> | 660 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-412025</xccdf-1.2:reference> |
| 661 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261365r996541_rule</xccdf-1.2:reference> | 661 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261365r996541_rule</xccdf-1.2:reference> |
| 662 | ············<xccdf-1.2:rationale>Limiting·the·number·of·logon·attempts·over·a·certain·time·interval·reduces | 662 | ············<xccdf-1.2:rationale>Limiting·the·number·of·logon·attempts·over·a·certain·time·interval·reduces |
| 663 | the·chances·that·an·unauthorized·user·may·gain·access·to·an·account.</xccdf-1.2:rationale> | 663 | the·chances·that·an·unauthorized·user·may·gain·access·to·an·account.</xccdf-1.2:rationale> |
| 664 | ············<xccdf-1.2:platform·idref="#package_pam"/> | 664 | ············<xccdf-1.2:platform·idref="#package_pam"/> |
| 665 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94092-4</xccdf-1.2:ident> | 665 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94092-4</xccdf-1.2:ident> |
| 666 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="accounts_passwords_pam_faildelay_delay"> | ||
| 667 | ··············#·Remediation·is·applicable·only·in·certain·platforms | ||
| 668 | if·rpm·--quiet·-q·pam;·then | ||
| 669 | var_password_pam_delay=' | ||
| 670 | ··············<xccdf-1.2:sub·idref="xccdf_org.ssgproject.content_value_var_password_pam_delay"·use="legacy"/> | ||
| 671 | ··············' | ||
| 672 | if·[·-e·"/etc/pam.d/common-auth"·]·;·then | ||
| 673 | ····valueRegex="$var_password_pam_delay"·defaultValue="$var_password_pam_delay" | ||
| 674 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 675 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 676 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 677 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 678 | ····#·fix·'type'·if·it's·wrong | ||
| 679 | ····if·grep·-q·-P·"^\\s*(?"'!'"auth\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·;·then | ||
| 680 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum:]]+\\s+pam_faildelay.so)/\\1auth\\2/"·"/etc/pam.d/common-auth" | ||
| 681 | ····fi | ||
| 682 | ····#·fix·'control'·if·it's·wrong | ||
| 683 | ····if·grep·-q·-P·"^\\s*auth\\s+(?"'!'"required)[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·;·then | ||
| 684 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+)[[:alnum:]]+(\\s+pam_faildelay.so)/\\1required\\2/"·"/etc/pam.d/common-auth" | ||
| 685 | ····fi | ||
| 686 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 687 | ····if·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-auth"·;·then | ||
| 688 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s)delay=[^[:space:]]*/\\1delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 689 | ····#·add·'option=default'·if·option·is·not·set | ||
| 690 | ····elif·grep·-q·-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·&& | ||
| 691 | ············grep····-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·|·grep·-q·-E·-v·"\\sdelay(=|\\s|\$)"·;·then | ||
| 692 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so[^\\n]*)/\\1·delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 693 | ····#·add·a·new·entry·if·none·exists | ||
| 694 | ····elif·!·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay${valueRegex}(\\s|\$)"·<·"/etc/pam.d/common-auth"·;·then | ||
| 695 | ········echo·"auth·required·pam_faildelay.so·delay${defaultValue}"·>>·"/etc/pam.d/common-auth" | ||
| 696 | ····fi | ||
| 697 | else | ||
| 698 | ····echo·"/etc/pam.d/common-auth·doesn't·exist"·>&2 | ||
| 699 | fi | ||
| 700 | else | ||
| 701 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 702 | fi | ||
| 703 | ············</xccdf-1.2:fix> | ||
| 666 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="accounts_passwords_pam_faildelay_delay"·complexity="low"·disruption="low"·reboot="false"·strategy="restrict"> | 704 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="accounts_passwords_pam_faildelay_delay"·complexity="low"·disruption="low"·reboot="false"·strategy="restrict"> |
| 667 | ··············-·name:·Gather·the·package·facts | 705 | ··············-·name:·Gather·the·package·facts |
| 668 | ··package_facts: | 706 | ··package_facts: |
| 669 | ····manager:·auto | 707 | ····manager:·auto |
| 670 | ··tags: | 708 | ··tags: |
| 671 | ··-·CCE-94092-4 | 709 | ··-·CCE-94092-4 |
| 672 | ··-·DISA-STIG-SLEM-05-412025 | 710 | ··-·DISA-STIG-SLEM-05-412025 |
| Offset 799, 61 lines modified | Offset 846, 14 lines modified | ||
| 799 | ··-·accounts_passwords_pam_faildelay_delay | 846 | ··-·accounts_passwords_pam_faildelay_delay |
| 800 | ··-·low_complexity | 847 | ··-·low_complexity |
| 801 | ··-·low_disruption | 848 | ··-·low_disruption |
| 802 | ··-·medium_severity | 849 | ··-·medium_severity |
| 803 | ··-·no_reboot_needed | 850 | ··-·no_reboot_needed |
| 804 | ··-·restrict_strategy | 851 | ··-·restrict_strategy |
| 805 | ············</xccdf-1.2:fix> | 852 | ············</xccdf-1.2:fix> |
| 806 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="accounts_passwords_pam_faildelay_delay"> | ||
| 807 | ··············#·Remediation·is·applicable·only·in·certain·platforms | ||
| 808 | if·rpm·--quiet·-q·pam;·then | ||
| 809 | var_password_pam_delay=' | ||
| 810 | ··············<xccdf-1.2:sub·idref="xccdf_org.ssgproject.content_value_var_password_pam_delay"·use="legacy"/> | ||
| 811 | ··············' | ||
| 812 | if·[·-e·"/etc/pam.d/common-auth"·]·;·then | ||
| 813 | ····valueRegex="$var_password_pam_delay"·defaultValue="$var_password_pam_delay" | ||
| 814 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 815 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 816 | ····#·add·an·equals·sign·to·non-empty·values | ||
| Max diff block lines reached; 667135/678987 bytes (98.25%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-uos20-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-uos20-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:uos:uniontech_os_server:20"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:uos:uniontech_os_server:20"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">UnionTech·OS·Server·20</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">UnionTech·OS·Server·20</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml">oval:ssg-installed_OS_is_uos20:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml">oval:ssg-installed_OS_is_uos20:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-uos20-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-uos20-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of | 40 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 104, 158 lines modified | Offset 104, 158 lines modified | ||
| 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 110 | ······<cpe-lang:platform-specification> | 110 | ······<cpe-lang:platform-specification> |
| 111 | ········<cpe-lang:platform·id="package_ | 111 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 114 | ··········</cpe-lang:logical-test> | 114 | ··········</cpe-lang:logical-test> |
| 115 | ········</cpe-lang:platform> | 115 | ········</cpe-lang:platform> |
| 116 | ········<cpe-lang:platform·id=" | 116 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 119 | ··········</cpe-lang:logical-test> | 119 | ··········</cpe-lang:logical-test> |
| 120 | ········</cpe-lang:platform> | 120 | ········</cpe-lang:platform> |
| 121 | ········<cpe-lang:platform·id="machine | 121 | ········<cpe-lang:platform·id="machine"> |
| 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 125 | ··········</cpe-lang:logical-test> | 124 | ··········</cpe-lang:logical-test> |
| 126 | ········</cpe-lang:platform> | 125 | ········</cpe-lang:platform> |
| 127 | ········<cpe-lang:platform·id=" | 126 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 128 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 130 | ··········</cpe-lang:logical-test> | 129 | ··········</cpe-lang:logical-test> |
| 131 | ········</cpe-lang:platform> | 130 | ········</cpe-lang:platform> |
| 132 | ········<cpe-lang:platform·id="gr | 131 | ········<cpe-lang:platform·id="package_logrotate"> |
| 133 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 135 | ··········</cpe-lang:logical-test> | 134 | ··········</cpe-lang:logical-test> |
| 136 | ········</cpe-lang:platform> | 135 | ········</cpe-lang:platform> |
| 137 | ········<cpe-lang:platform·id=" | 136 | ········<cpe-lang:platform·id="package_sudo"> |
| 138 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 140 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 141 | ············</cpe-lang:logical-test> | ||
| 142 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ············ | 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 144 | ············</cpe-lang:logical-test> | ||
| 145 | ··········</cpe-lang:logical-test> | 139 | ··········</cpe-lang:logical-test> |
| 146 | ········</cpe-lang:platform> | 140 | ········</cpe-lang:platform> |
| 141 | ········<cpe-lang:platform·id="machine_and_package_ufw"> | ||
| 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 144 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 145 | ··········</cpe-lang:logical-test> | ||
| 146 | ········</cpe-lang:platform> | ||
| 147 | ········<cpe-lang:platform·id="not_aarch64_arch | 147 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 148 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 150 | ··········</cpe-lang:logical-test> | ||
| 151 | ········</cpe-lang:platform> | ||
| 152 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 148 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 154 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 150 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 155 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 151 | ············</cpe-lang:logical-test> | 156 | ············</cpe-lang:logical-test> |
| 152 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 157 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 153 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 158 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 154 | ············</cpe-lang:logical-test> | 159 | ············</cpe-lang:logical-test> |
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 155 | ··········</cpe-lang:logical-test> | 161 | ··········</cpe-lang:logical-test> |
| 156 | ········</cpe-lang:platform> | 162 | ········</cpe-lang:platform> |
| 157 | ········<cpe-lang:platform·id="package_ | 163 | ········<cpe-lang:platform·id="package_yum"> |
| 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 160 | ··········</cpe-lang:logical-test> | 166 | ··········</cpe-lang:logical-test> |
| 161 | ········</cpe-lang:platform> | 167 | ········</cpe-lang:platform> |
| 162 | ········<cpe-lang:platform·id=" | 168 | ········<cpe-lang:platform·id="package_systemd"> |
| 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 165 | ··········</cpe-lang:logical-test> | 171 | ··········</cpe-lang:logical-test> |
| 166 | ········</cpe-lang:platform> | 172 | ········</cpe-lang:platform> |
| 167 | ········<cpe-lang:platform·id=" | 173 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 168 | ··········<cpe-lang:logical-test·operator=" | 174 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 176 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 172 | ··········</cpe-lang:logical-test> | 177 | ··········</cpe-lang:logical-test> |
| 173 | ········</cpe-lang:platform> | 178 | ········</cpe-lang:platform> |
| 174 | ········<cpe-lang:platform·id="package_ | 179 | ········<cpe-lang:platform·id="package_gdm"> |
| 175 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 180 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 177 | ··········</cpe-lang:logical-test> | 182 | ··········</cpe-lang:logical-test> |
| 178 | ········</cpe-lang:platform> | 183 | ········</cpe-lang:platform> |
| 179 | ········<cpe-lang:platform·id=" | 184 | ········<cpe-lang:platform·id="package_postfix"> |
| 180 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 185 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 182 | ··········</cpe-lang:logical-test> | 187 | ··········</cpe-lang:logical-test> |
| 183 | ········</cpe-lang:platform> | 188 | ········</cpe-lang:platform> |
| 184 | ········<cpe-lang:platform·id=" | 189 | ········<cpe-lang:platform·id="grub2"> |
| 185 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 190 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 187 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 188 | ··········</cpe-lang:logical-test> | 192 | ··········</cpe-lang:logical-test> |
| 189 | ········</cpe-lang:platform> | 193 | ········</cpe-lang:platform> |
| 190 | ········<cpe-lang:platform·id="package_sh | 194 | ········<cpe-lang:platform·id="package_rsh-server"> |
| 191 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 195 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 192 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_sh | 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| Max diff block lines reached; 1189829/1204059 bytes (98.82%) of diff not shown. | |||
| Offset 3, 5136 lines modified | Offset 3, 4991 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_pub_key_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_pub_key_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-restrict_serial_port_logins_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Restrict·Serial·Port·Root·Logins</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-restrict_serial_port_logins_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_binary_dirs_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Verify·that·System·Executables·Have·Root·Ownership</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_binary_dirs_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_disable_ipv6_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 11 | ······<ocil:title>Disable·IPv6·Addressing·on·All·IPv6·Interfaces</ocil:title> |
| 30 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_disable_ipv6_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 17 | ······<ocil:title>Enable·seccomp·to·safely·compute·untrusted·bytecode</ocil:title> |
| 36 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_library_dirs_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Dis | 23 | ······<ocil:title>Verify·that·Shared·Library·Directories·Have·Restrictive·Permissions</ocil:title> |
| 42 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-dir_permissions_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_unmap_kernel_at_el0_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 29 | ······<ocil:title>Unmap·kernel·when·running·in·userspace·(aka·KAISER)</ocil:title> |
| 48 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_unmap_kernel_at_el0_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-ensure_logrotate_activated_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 35 | ······<ocil:title>Ensure·Logrotate·Runs·Periodically</ocil:title> |
| 54 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-ensure_logrotate_activated_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> | ||
| 59 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_sgid_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·All·SGID·Executables·Are·Authorized</ocil:title> | ||
| 60 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_unauthorized_sgid_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_gshadow_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify· | 47 | ······<ocil:title>Verify·Permissions·on·gshadow·File</ocil:title> |
| 66 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-file_ | 49 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_chown_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 53 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·chown</ocil:title> |
| 72 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_chown_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_ocil:questionnaire:1"> | ||
| 77 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_requiretty_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·requiretty</ocil:title> | ||
| 78 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_requiretty_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_keepalive_0_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 65 | ······<ocil:title>Set·SSH·Client·Alive·Count·Max·to·zero</ocil:title> |
| 84 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_keepalive_0_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_shadow_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 71 | ······<ocil:title>Verify·Group·Who·Owns·shadow·File</ocil:title> |
| 90 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_limit_user_access_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 77 | ······<ocil:title>Limit·Users'·SSH·Access</ocil:title> |
| 96 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_limit_user_access_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> | ||
| 101 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_mac_modification_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Record·Events·that·Modify·the·System's·Mandatory·Access·Controls</ocil:title> | ||
| 102 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_mac_modification_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_poweroff_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·poweroff</ocil:title> |
| 108 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_poweroff_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmodat_ocil:questionnaire:1"> | ||
| 113 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_binary_dirs_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Verify·that·System·Executables·Have·Root·Ownership</ocil:title> | ||
| 114 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-configure_crypto_policy_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 101 | ······<ocil:title>Configure·System·Cryptography·Policy</ocil:title> |
| 120 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-configure_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_dmesg_restrict_ocil:questionnaire:1"> |
| 125 | ······<ocil:title>Re | 107 | ······<ocil:title>Restrict·unprivileged·access·to·the·kernel·syslog</ocil:title> |
| Max diff block lines reached; 709316/721493 bytes (98.31%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-12-11">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of | 7 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 158 lines modified | Offset 71, 158 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="machine | 88 | ····<cpe-lang:platform·id="machine"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="gr | 98 | ····<cpe-lang:platform·id="package_logrotate"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 103 | ····<cpe-lang:platform·id="package_sudo"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 108 | ········</cpe-lang:logical-test> | ||
| 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 110 | ········ | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 111 | ········</cpe-lang:logical-test> | ||
| 112 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | ||
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | ||
| 113 | ····</cpe-lang:platform> | ||
| 114 | ····<cpe-lang:platform·id="not_aarch64_arch | 114 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | ||
| 118 | ····</cpe-lang:platform> | ||
| 119 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 118 | ········</cpe-lang:logical-test> | 123 | ········</cpe-lang:logical-test> |
| 119 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 120 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 121 | ········</cpe-lang:logical-test> | 126 | ········</cpe-lang:logical-test> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="package_ | 130 | ····<cpe-lang:platform·id="package_yum"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 135 | ····<cpe-lang:platform·id="package_systemd"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 135 | ······<cpe-lang:logical-test·operator=" | 141 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="package_ | 146 | ····<cpe-lang:platform·id="package_gdm"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 151 | ····<cpe-lang:platform·id="package_postfix"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 156 | ····<cpe-lang:platform·id="grub2"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 155 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id="package_sh | 161 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_sh | 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 164 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 165 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="package_chrony"> | 166 | ····<cpe-lang:platform·id="package_chrony"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 169 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 170 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id=" | 171 | ····<cpe-lang:platform·id="package_bind"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 170 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 171 | ········</cpe-lang:logical-test> | ||
| 172 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 173 | ········ | 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> |
| 174 | ········</cpe-lang:logical-test> | ||
| Max diff block lines reached; 424039/438566 bytes (96.69%) of diff not shown. | |||